pumasecurity / puma-scan

Puma Scan is a software security Visual Studio extension that provides real time, continuous source code analysis as development teams write code. Vulnerabilities are immediately displayed in the development environment as spell check and compiler warnings, preventing security bugs from entering your applications.
https://www.pumascan.com
Mozilla Public License 2.0
446 stars 80 forks source link

I don't understand how to fix problems (SEC0112, SEC0032) #81

Open flexxxxer opened 1 year ago

flexxxxer commented 1 year ago

The link (https://github.com/flexxxxer/RamDrive.OsfMount/tree/b1e5edc3f69a25e369ae36adb2e769f6c5339907) is the version of the repository of my OSFMount ram-disk wrapper library, which is not built. Reason: SEC0112, SEC0032.

SEC0032 reports on ProcessStartInfo objects creation. I need to pass exactly the arguments that were specified, and after reading the documentation for this error, I still did not understand what the fix should look like. SEC0112 reports on FileStream, which used with temporary folder path, generated at runtime. I cannot have configuration with temporary file path, you know... And I don't understand what the error correction should look like.