Toutsu 06d40fdbc8 ci: add deep SAST via SecurityCodeScan Roslyn analyzer ...

- SecurityCodeScan.VS2019 5.6.7 injected into Directory.Build.props
  scans all C# source during every dotnet build
- HIGH/CRITICAL findings fail the build because TreatWarningsAsErrors=true
- No extra CI step needed: analyzer runs inside every build job automatically

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-12 12:45:36 +03:00

..

workflows

ci: add deep SAST via SecurityCodeScan Roslyn analyzer

2026-05-12 12:45:36 +03:00