Sonar F# Security. Security scanning for F# code in SonarQube.

github.com/swlaschin/sonar-fsharpsecurity-plugin

Vaya's read on this project

Problem, audience, market, and the verdict — sign in to see it.

Updates

February 2022
  • Merge pull request #7 from swlaschin/dependabot/maven/sonar-fsharpsec…
January 2022
  • Bump xercesImpl from 2.12.0 to 2.12.2 in /sonar-fsharpsecurity-plugin
June 2020
  • Merge pull request #5 from richardjharding/master
May 2020
  • Allow dotnet test to run in wsl as well as windows
April 2020
  • Merge pull request #3 from thelegendofando/master
September 2019
  • adding rule for regular expressions
  • Merge pull request #2 from thelegendofando/master
  • implementing bypassing accessibility rule
  • Implementing Random rule
  • Merge pull request #1 from thelegendofando/master
  • don't mix dotnetframework and dotnetstandard references
  • adding dotnetcore references to avoid 'no implementation files found'…
  • Tweak logging
  • Add .fsx to allowed files
  • Fix fatal error parsing .fsi file. Improve logging.
  • Add notes explaining why Security Hotspot support is missing
  • Tweak docs
  • Change Appveyor version to 1.x.x.
  • Remove branch analysis and build from appveyor.yml, which caused buil…
  • Works with SonarScanner! Also, major refactoring and change of schemas.