[APIPUB-76] - Adds Sonar Analyzer #117
on-pullrequest.yml
on: pull_request
Scan Actions, scan all files for BIDI Trojan Attacks
/
action-allowedlist
25s
Scan Actions, scan all files for BIDI Trojan Attacks
/
bidi-scanner
3s
Build and Test
35s
Event File
2s
Annotations
10 errors and 1 warning
Build and Test:
src/EdFi.Tools.ApiPublisher.Connections.Api/Processing/Target/Blocks/PostResourceProcessingBlocksFactory.cs#L556
Private record classes which are not derived in the current assembly should be marked as 'sealed'. (https://rules.sonarsource.com/csharp/RSPEC-3260)
|
Build and Test:
src/EdFi.Tools.ApiPublisher.Connections.Api/Processing/Target/Blocks/PostResourceProcessingBlocksFactory.cs#L727
Make this field 'private' and encapsulate it in a 'public' property. (https://rules.sonarsource.com/csharp/RSPEC-1104)
|
Build and Test:
src/EdFi.Tools.ApiPublisher.Connections.Api/Processing/Target/Blocks/PostResourceProcessingBlocksFactory.cs#L728
Make this field 'private' and encapsulate it in a 'public' property. (https://rules.sonarsource.com/csharp/RSPEC-1104)
|
Build and Test:
src/EdFi.Tools.ApiPublisher.Connections.Api/Processing/Target/Blocks/PostResourceProcessingBlocksFactory.cs#L728
Change the visibility of 'NotFound' or make it 'const' or 'readonly'. (https://rules.sonarsource.com/csharp/RSPEC-2223)
|
Build and Test:
src/EdFi.Tools.ApiPublisher.Connections.Api/Processing/Target/Blocks/PostResourceProcessingBlocksFactory.cs#L727
Change the visibility of 'Found' or make it 'const' or 'readonly'. (https://rules.sonarsource.com/csharp/RSPEC-2223)
|
Build and Test:
src/EdFi.Tools.ApiPublisher.Connections.Api/Configuration/ApiConnectionDetails.cs#L17
Do not forget to remove this deprecated code someday. (https://rules.sonarsource.com/csharp/RSPEC-1133)
|
Build and Test:
src/EdFi.Tools.ApiPublisher.Connections.Api/Configuration/ApiConnectionDetails.cs#L47
Do not forget to remove this deprecated code someday. (https://rules.sonarsource.com/csharp/RSPEC-1133)
|
Build and Test:
src/EdFi.Tools.ApiPublisher.Connections.Api/Configuration/ApiConnectionDetails.cs#L32
Do not forget to remove this deprecated code someday. (https://rules.sonarsource.com/csharp/RSPEC-1133)
|
Build and Test:
src/EdFi.Tools.ApiPublisher.Connections.Api/ApiClientManagement/EdFiApiClientProvider.cs#L26
Don't use string interpolation in logging message templates. (https://rules.sonarsource.com/csharp/RSPEC-2629)
|
Build and Test:
src/EdFi.Tools.ApiPublisher.Connections.Api/Metadata/Dependencies/EdFiApiGraphMLDependencyMetadataProvider.cs#L58
Logging in a catch clause should pass the caught exception as a parameter. (https://rules.sonarsource.com/csharp/RSPEC-6667)
|
Build and Test
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/setup-dotnet@607fce577a46308457984d59e4954e075820f10a. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
Artifacts
Produced during runtime
Name | Size | |
---|---|---|
Event File
|
3.12 KB |
|