Infer# is an interprocedural and scalable static code analyzer for C#. Via the capabilities of Facebook's Infer, this tool detects null dereferences, resource leaks, and thread-safety violations. It also performs taint flow tracking to detect critical security vulnerabilities like SQL injections.
Infer looks really nice, however it does not appear to be something we can add into our standard pipelines amongst the team as it has pretty heavily dependencies on things like WSL. Ideally this can be added to a C# project and run on any machine without external dependencies.
Infer looks really nice, however it does not appear to be something we can add into our standard pipelines amongst the team as it has pretty heavily dependencies on things like WSL. Ideally this can be added to a C# project and run on any machine without external dependencies.