Skip to content

security: add vulnerability audit, static analysis, SECURITY.md, fix … #2

security: add vulnerability audit, static analysis, SECURITY.md, fix …

security: add vulnerability audit, static analysis, SECURITY.md, fix … #2

Triggered via push March 3, 2026 07:06
Status Failure
Total duration 30s
Artifacts

release.yml

on: push
Security Audit
27s
Security Audit
Build & Publish
0s
Build & Publish
Fit to window
Zoom out
Zoom in

Annotations

10 errors
Security Audit: src/TSG/Installer.cs#L59
The behavior of 'string.IndexOf(string)' could vary based on the current user's locale settings. Replace this call in 'TSG.Installer.UninstallAsync()' with a call to 'string.IndexOf(string, System.StringComparison)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1310)
Security Audit: src/TSG/Program.cs#L8
In method '<Main>$', replace the call to 'ToLowerInvariant' with 'ToUpperInvariant' (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1308)
Security Audit: src/TSG/Platform/WindowsHost.cs#L6
Because an application's API isn't typically referenced from outside the assembly, types can be made internal (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1515)
Security Audit: src/TSG/Platform/LinuxHost.cs#L6
Because an application's API isn't typically referenced from outside the assembly, types can be made internal (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1515)
Security Audit: src/TSG/ScriptRunner.cs#L9
Because an application's API isn't typically referenced from outside the assembly, types can be made internal (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1515)
Security Audit: src/TSG/Diagnostics.cs#L9
Because an application's API isn't typically referenced from outside the assembly, types can be made internal (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1515)
Security Audit: src/TSG/Platform/IPlatformHost.cs#L25
Because an application's API isn't typically referenced from outside the assembly, types can be made internal (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1515)
Security Audit: src/TSG/Platform/IPlatformHost.cs#L6
Because an application's API isn't typically referenced from outside the assembly, types can be made internal (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1515)
Security Audit: src/TSG/Installer.cs#L9
Because an application's API isn't typically referenced from outside the assembly, types can be made internal (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1515)
Security Audit: src/TSG/CommandRegistry.cs#L8
Because an application's API isn't typically referenced from outside the assembly, types can be made internal (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1515)