Analyzer for cake addins to detect if there are any recommended or required changes that can be done.
Home Page: https://wormiecorp.github.io/Cake.Addin.Analyzer/
License: MIT License
![allcontributors[bot] avatar](https://avatars.githubusercontent.com/in/23186?v=4 "allcontributors[bot]")
![dependabot-preview[bot] avatar](https://avatars.githubusercontent.com/in/2141?v=4 "dependabot-preview[bot]")
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot]")
![renovate[bot] avatar](https://avatars.githubusercontent.com/in/2740?v=4 "renovate[bot]")
Hello, there!
As part of the university research we are currently doing regarding the security of Github Actions, we noticed that one or many of the workflows that are part of this repository are referencing vulnerable versions of the third-party actions. As part of a disclosure process, we decided to open issues to notify GitHub Community.
Please note that there are could be some false positives in our methodology, thus not all of the open issues could be valid. If that is the case, please let us know, so that we can improve on our approach. You can contact me directly using an email: ikoishy [at] ncsu.edu
Thanks in advance
The vulnerability fix that is missing by actions' versions could be related to:
(1) CVE fix
(2) upgrade of vulnerable dependency
(3) fix to secret leak and others.
Please consider updating the reference to the action.
If you end up updating the reference, please let us know. We need the stats for the paper :-)
The .NET Core 2.1 target reference is out of date, and won't be receiving any updates in the future.
As such it should be removed from the frameworks we test against in the test project.
Since only the test project references this framework, it is not considered a breaking change, and only build related.
Wyam documentation was recently added, but the long term goal will be to replace the documentation generated by Wyam with Statiq.
This is probably something I would need help with to achieve
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
These problems occurred while renovating this repository. View logs.
These updates are currently rate-limited. Click on a checkbox below to force their creation now.
Microsoft.NET.Test.Sdk, Microsoft.TestPlatform.ObjectModel)Cake.Core, cake.tool)Microsoft.NET.Test.Sdk, Microsoft.TestPlatform.ObjectModel)These updates have all been created already. Click a checkbox below to force a retry/rebase of any.
build.cake
Cake.Recipe 2.2.1NuGet.CommandLine 5.6.0dotnet-t4 2.2.1
.github/workflows/build.yml
actions/checkout v2.4.0actions/cache v2.github/workflows/codeql-analysis.yml
actions/checkout v2actions/cache v2github/codeql-action v1github/codeql-action v1github/codeql-action v1ubuntu 18.04.github/workflows/pre-release-notes.yml
actions/checkout v2.4.0actions/cache v2gittools/actions v0.9.11gittools/actions v0.9.11ad-m/github-push-action v0.6.0ubuntu 18.04.github/workflows/publishdocs.yml
actions/checkout v2.4.0actions/cache v2ubuntu 18.04.github/workflows/release-notes.yml
actions/checkout v2.4.0actions/cache v2gittools/actions v0.9.11gittools/actions v0.9.11ad-m/github-push-action v0.6.0ubuntu 18.04
.config/dotnet-tools.json
cake.tool 0.38.5demo/Cake.TestAddin/Cake.TestAddin.csproj
Cake.Core 0.38.5Cake.Addin.Analyzer 0.1.3src/Cake.Addin.Analyzer.CodeFixes/Cake.Addin.Analyzer.CodeFixes.csproj
Roslynator.CodeAnalysis.Analyzers 1.0.0Roslynator.Analyzers 3.1.0Microsoft.SourceLink.GitHub 1.0.0Microsoft.CodeAnalysis.CSharp.Workspaces 3.9.0src/Cake.Addin.Analyzer.Package/Cake.Addin.Analyzer.Package.csproj
Microsoft.SourceLink.GitHub 1.0.0src/Cake.Addin.Analyzer.Rules/Cake.Addin.Analyzer.Rules.csproj
Roslynator.CodeAnalysis.Analyzers 1.0.0Roslynator.Analyzers 3.1.0Microsoft.SourceLink.GitHub 1.0.0Microsoft.CodeAnalysis.CSharp 3.9.0Microsoft.CodeAnalysis.Analyzers 3.3.3src/Cake.Addin.Analyzer.Tests/Cake.Addin.Analyzer.Tests.csproj
NUnit3TestAdapter 3.17.0NUnit 3.13.2Microsoft.SourceLink.GitHub 1.0.0Microsoft.NETFramework.ReferenceAssemblies 1.0.2Microsoft.CodeAnalysis.VisualBasic.CodeRefactoring.Testing.NUnit 1.0.1-beta1.21117.2Microsoft.CodeAnalysis.VisualBasic.CodeFix.Testing.NUnit 1.0.1-beta1.21117.2Microsoft.CodeAnalysis.VisualBasic.Analyzer.Testing.NUnit 1.0.1-beta1.21117.2Microsoft.CodeAnalysis.CSharp.CodeRefactoring.Testing.NUnit 1.0.1-beta1.21117.2Microsoft.CodeAnalysis.CSharp.CodeFix.Testing.NUnit 1.0.1-beta1.21117.2Microsoft.CodeAnalysis.CSharp.Analyzer.Testing.NUnit 1.0.1-beta1.21117.2Microsoft.CodeAnalysis 3.11.0Microsoft.TestPlatform.ObjectModel 16.9.4Microsoft.NET.Test.Sdk 16.9.4FluentAssertions 5.10.3coverlet.msbuild 3.1.2Appveyor.TestLogger 2.0.0src/Cake.Addin.Analyzer.Vsix/Cake.Addin.Analyzer.Vsix.csproj
Microsoft.VSSDK.BuildTools 16.10.10
Describe the bug
I have split my addins across multiple partial classes. One of the partial classes contains the CakeAliasCategory attribute. The analyzer reports violation for all other partial classes.
To Reproduce
Expected behavior
Attributes on a partial class is valid for the whole class.
Analyzer should takes this into account.
As discussed on this issue the analyzer shouldn't suggest adding an attribute on internal/private methods.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
The attribute shouldn't be recommended to be added.
Screenshots
N/A
Desktop (please complete the following information):
Additional context
N/A
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
These updates are currently rate-limited. Click on a checkbox below to force their creation now.
Microsoft.NET.Test.Sdk, Microsoft.TestPlatform.ObjectModel)Cake.Core, cake.tool)Microsoft.NET.Test.Sdk, Microsoft.TestPlatform.ObjectModel)These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.
These updates have all been created already. Click a checkbox below to force a retry/rebase of any.
build.cake
Cake.Recipe 2.2.1NuGet.CommandLine 5.6.0dotnet-t4 2.2.1
.github/workflows/build.yml
actions/checkout v2.4.0actions/cache v2.github/workflows/codeql-analysis.yml
actions/checkout v2actions/cache v2github/codeql-action v1github/codeql-action v1github/codeql-action v1ubuntu 18.04.github/workflows/pre-release-notes.yml
actions/checkout v2.4.0actions/cache v2gittools/actions v0.9.11gittools/actions v0.9.11ad-m/github-push-action v0.6.0ubuntu 18.04.github/workflows/publishdocs.yml
actions/checkout v2.4.0actions/cache v2ubuntu 18.04.github/workflows/release-notes.yml
actions/checkout v2.4.0actions/cache v2gittools/actions v0.9.11gittools/actions v0.9.11ad-m/github-push-action v0.6.0ubuntu 18.04
.config/dotnet-tools.json
cake.tool 0.38.5demo/Cake.TestAddin/Cake.TestAddin.csproj
Cake.Core 0.38.5Cake.Addin.Analyzer 0.1.3src/Cake.Addin.Analyzer.CodeFixes/Cake.Addin.Analyzer.CodeFixes.csproj
Roslynator.CodeAnalysis.Analyzers 1.0.0Roslynator.Analyzers 3.1.0Microsoft.SourceLink.GitHub 1.0.0Microsoft.CodeAnalysis.CSharp.Workspaces 3.9.0src/Cake.Addin.Analyzer.Package/Cake.Addin.Analyzer.Package.csproj
Microsoft.SourceLink.GitHub 1.0.0src/Cake.Addin.Analyzer.Rules/Cake.Addin.Analyzer.Rules.csproj
Roslynator.CodeAnalysis.Analyzers 1.0.0Roslynator.Analyzers 3.1.0Microsoft.SourceLink.GitHub 1.0.0Microsoft.CodeAnalysis.CSharp 3.9.0Microsoft.CodeAnalysis.Analyzers 3.3.3src/Cake.Addin.Analyzer.Tests/Cake.Addin.Analyzer.Tests.csproj
NUnit3TestAdapter 3.17.0NUnit 3.13.2Microsoft.SourceLink.GitHub 1.0.0Microsoft.NETFramework.ReferenceAssemblies 1.0.2Microsoft.CodeAnalysis.VisualBasic.CodeRefactoring.Testing.NUnit 1.0.1-beta1.21117.2Microsoft.CodeAnalysis.VisualBasic.CodeFix.Testing.NUnit 1.0.1-beta1.21117.2Microsoft.CodeAnalysis.VisualBasic.Analyzer.Testing.NUnit 1.0.1-beta1.21117.2Microsoft.CodeAnalysis.CSharp.CodeRefactoring.Testing.NUnit 1.0.1-beta1.21117.2Microsoft.CodeAnalysis.CSharp.CodeFix.Testing.NUnit 1.0.1-beta1.21117.2Microsoft.CodeAnalysis.CSharp.Analyzer.Testing.NUnit 1.0.1-beta1.21117.2Microsoft.CodeAnalysis 3.11.0Microsoft.TestPlatform.ObjectModel 16.9.4Microsoft.NET.Test.Sdk 16.9.4FluentAssertions 5.10.3coverlet.msbuild 3.1.2Appveyor.TestLogger 2.0.0src/Cake.Addin.Analyzer.Vsix/Cake.Addin.Analyzer.Vsix.csproj
Microsoft.VSSDK.BuildTools 16.10.10
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ❤️ Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.