Skip to content

security: add vulnerability audit, static analysis, SECURITY.md, fix … #1

security: add vulnerability audit, static analysis, SECURITY.md, fix …

security: add vulnerability audit, static analysis, SECURITY.md, fix … #1

Triggered via push March 3, 2026 07:06
Status Success
Total duration 37s
Artifacts

security.yml

on: push
Security Audit
34s
Security Audit
Fit to window
Zoom out
Zoom in

Annotations

20 warnings
Security Audit: src/TSG/Platform/IPlatformHost.cs#L25
Because an application's API isn't typically referenced from outside the assembly, types can be made internal
Security Audit: src/TSG/Platform/IPlatformHost.cs#L6
Because an application's API isn't typically referenced from outside the assembly, types can be made internal
Security Audit: src/TSG/Installer.cs#L101
The behavior of 'string.IndexOf(string)' could vary based on the current user's locale settings. Replace this call in 'TSG.Installer.ConfigurePwshProfile()' with a call to 'string.IndexOf(string, System.StringComparison)'.
Security Audit: src/TSG/Installer.cs#L100
The behavior of 'string.IndexOf(string)' could vary based on the current user's locale settings. Replace this call in 'TSG.Installer.ConfigurePwshProfile()' with a call to 'string.IndexOf(string, System.StringComparison)'.
Security Audit: src/TSG/Installer.cs#L81
'string.Contains(string)' has a method overload that takes a 'StringComparison' parameter. Replace this call in 'TSG.Installer.ExtractScripts()' with a call to 'string.Contains(string, System.StringComparison)' for clarity of intent.
Security Audit: src/TSG/Installer.cs#L60
The behavior of 'string.IndexOf(string)' could vary based on the current user's locale settings. Replace this call in 'TSG.Installer.UninstallAsync()' with a call to 'string.IndexOf(string, System.StringComparison)'.
Security Audit: src/TSG/Installer.cs#L59
The behavior of 'string.IndexOf(string)' could vary based on the current user's locale settings. Replace this call in 'TSG.Installer.UninstallAsync()' with a call to 'string.IndexOf(string, System.StringComparison)'.
Security Audit: src/TSG/Installer.cs#L9
Because an application's API isn't typically referenced from outside the assembly, types can be made internal
Security Audit: src/TSG/Diagnostics.cs#L9
Because an application's API isn't typically referenced from outside the assembly, types can be made internal
Security Audit: src/TSG/CommandRegistry.cs#L8
Because an application's API isn't typically referenced from outside the assembly, types can be made internal
Security Audit: src/TSG/Installer.cs#L59
The behavior of 'string.IndexOf(string)' could vary based on the current user's locale settings. Replace this call in 'TSG.Installer.UninstallAsync()' with a call to 'string.IndexOf(string, System.StringComparison)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1310)
Security Audit: src/TSG/Program.cs#L8
In method '<Main>$', replace the call to 'ToLowerInvariant' with 'ToUpperInvariant' (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1308)
Security Audit: src/TSG/Platform/WindowsHost.cs#L6
Because an application's API isn't typically referenced from outside the assembly, types can be made internal (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1515)
Security Audit: src/TSG/Platform/LinuxHost.cs#L6
Because an application's API isn't typically referenced from outside the assembly, types can be made internal (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1515)
Security Audit: src/TSG/ScriptRunner.cs#L9
Because an application's API isn't typically referenced from outside the assembly, types can be made internal (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1515)
Security Audit: src/TSG/Diagnostics.cs#L9
Because an application's API isn't typically referenced from outside the assembly, types can be made internal (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1515)
Security Audit: src/TSG/Platform/IPlatformHost.cs#L25
Because an application's API isn't typically referenced from outside the assembly, types can be made internal (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1515)
Security Audit: src/TSG/Platform/IPlatformHost.cs#L6
Because an application's API isn't typically referenced from outside the assembly, types can be made internal (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1515)
Security Audit: src/TSG/Installer.cs#L9
Because an application's API isn't typically referenced from outside the assembly, types can be made internal (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1515)
Security Audit: src/TSG/CommandRegistry.cs#L8
Because an application's API isn't typically referenced from outside the assembly, types can be made internal (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1515)