Skip to content

Bump SonarAnalyzer.CSharp from 9.29.0.95321 to 9.30.0.95878 in /src #114

Bump SonarAnalyzer.CSharp from 9.29.0.95321 to 9.30.0.95878 in /src

Bump SonarAnalyzer.CSharp from 9.29.0.95321 to 9.30.0.95878 in /src #114

Triggered via pull request July 23, 2024 16:02
Status Success
Total duration 50s
Artifacts

pull-request.yml

on: pull_request
Fit to window
Zoom out
Zoom in

Annotations

12 warnings
build
The following actions uses node12 which is deprecated and will be forced to run on node16: actions/setup-dotnet@v1, actions/checkout@v2. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/
build
The following actions uses Node.js version which is deprecated and will be forced to run on node20: actions/setup-dotnet@v1, actions/checkout@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
build: src/DevilDaggersInfo.Core.Common/Extensions/TimeExtensions.cs#L3
Do not forget to remove this deprecated code someday. (https://rules.sonarsource.com/csharp/RSPEC-1133)
build: src/DevilDaggersInfo.Core.Common/Extensions/TimeExtensions.cs#L6
Do not forget to remove this deprecated code someday. (https://rules.sonarsource.com/csharp/RSPEC-1133)
build: src/DevilDaggersInfo.Core.Common/Extensions/TimeExtensions.cs#L12
Do not forget to remove this deprecated code someday. (https://rules.sonarsource.com/csharp/RSPEC-1133)
build: src/DevilDaggersInfo.Core.Common/Extensions/TimeExtensions.cs#L18
Do not forget to remove this deprecated code someday. (https://rules.sonarsource.com/csharp/RSPEC-1133)
build: src/DevilDaggersInfo.Core.Common/Extensions/TimeExtensions.cs#L24
Do not forget to remove this deprecated code someday. (https://rules.sonarsource.com/csharp/RSPEC-1133)
build: src/DevilDaggersInfo.Core.Common/Extensions/TimeExtensions.cs#L30
Do not forget to remove this deprecated code someday. (https://rules.sonarsource.com/csharp/RSPEC-1133)
build: src/DevilDaggersInfo.Core.Encryption/AesBase32Wrapper.cs#L61
Use at least 100,000 iterations here. (https://rules.sonarsource.com/csharp/RSPEC-5344)
build: src/DevilDaggersInfo.Core.Encryption/AesBase32Wrapper.cs#L61
Rfc2898DeriveBytes might be using a weak hash algorithm. Use SHA256, SHA384, or SHA512 to create a strong key from a password. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca5379)
build: src/DevilDaggersInfo.Core.Encryption/AesBase32Wrapper.cs#L66
Symmetric encryption uses non-default initialization vector, which could be potentially repeatable (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca5401)
build: src/DevilDaggersInfo.Core.Encryption/AesBase32Wrapper.cs#L62
Use at least 100000 iterations when deriving a cryptographic key from a password. By default, Rfc2898DeriveByte's IterationCount is only 1000 (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca5387)