Skip to content
CodeQL

Bump Microsoft.Identity.Web, Microsoft.Extensions.Logging.Abstractions, System.Text.Encodings.Web, Microsoft.AspNetCore.DataProtection, System.Security.Cryptography.Xml, Microsoft.Extensions.Caching.Memory, Microsoft.Extensions.Logging, Microsoft.Extensions.DependencyInjection, System.Formats.Asn1, System.Security.Cryptography.Pkcs, Microsoft.Extensions.Configuration.Binder, Microsoft.Extensions.Configuration.EnvironmentVariables, Microsoft.Extensions.Configuration, Microsoft.Extensions.Configuration.Json, Microsoft.Extensions.Options.ConfigurationExtensions and Microsoft.Extensions.Hosting #2613

Sign in to view logs

Bump Microsoft.Identity.Web, Microsoft.Extensions.Logging.Abstractions, System.Text.Encodings.Web, Microsoft.AspNetCore.DataProtection, System.Security.Cryptography.Xml, Microsoft.Extensions.Caching.Memory, Microsoft.Extensions.Logging, Microsoft.Extensions.DependencyInjection, System.Formats.Asn1, System.Security.Cryptography.Pkcs, Microsoft.Extensions.Configuration.Binder, Microsoft.Extensions.Configuration.EnvironmentVariables, Microsoft.Extensions.Configuration, Microsoft.Extensions.Configuration.Json, Microsoft.Extensions.Options.ConfigurationExtensions and Microsoft.Extensions.Hosting

Bump Microsoft.Identity.Web, Microsoft.Extensions.Logging.Abstractions, System.Text.Encodings.Web, Microsoft.AspNetCore.DataProtection, System.Security.Cryptography.Xml, Microsoft.Extensions.Caching.Memory, Microsoft.Extensions.Logging, Microsoft.Extensions.DependencyInjection, System.Formats.Asn1, System.Security.Cryptography.Pkcs, Microsoft.Extensions.Configuration.Binder, Microsoft.Extensions.Configuration.EnvironmentVariables, Microsoft.Extensions.Configuration, Microsoft.Extensions.Configuration.Json, Microsoft.Extensions.Options.ConfigurationExtensions and Microsoft.Extensions.Hosting #2613

Triggered via pull request September 17, 2024 01:33
@dependabotdependabot[bot]
opened #3016
dependabot/nuget/multi-42f31b591d
Status Success
Total duration 6m 38s
Artifacts –

codeql-analysis.yml

on: pull_request
Analyse
6m 27s
Analyse
Fit to window
Zoom out
Zoom in

Annotations

6 warnings
Analyse: src/Microsoft.Identity.Web.TokenAcquisition/DefaultAuthorizationHeaderProvider.cs#L85
Dereference of a possibly null reference.
Analyse: src/Microsoft.Identity.Web.TokenAcquisition/DefaultAuthorizationHeaderProvider.cs#L86
Dereference of a possibly null reference.
Analyse: src/Microsoft.Identity.Web.TokenAcquisition/DefaultAuthorizationHeaderProvider.cs#L87
Dereference of a possibly null reference.
Analyse: tests/Microsoft.Identity.Web.Test.Common/Mocks/QueryStringParser.cs#L60
'string.Replace(string, string?)' has a method overload that takes a 'StringComparison' parameter. Replace this call in 'Microsoft.Identity.Web.Test.Common.Mocks.QueryStringParser.UrlDecode(string)' with a call to 'string.Replace(string, string?, System.StringComparison)' for clarity of intent. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1307)
Analyse
This run of the CodeQL Action does not have permission to access Code Scanning API endpoints. As a result, it will not be opted into any experimental features. This could be because the Action is running on a pull request from a fork. If not, please ensure the Action has the 'security-events: write' permission. Details: Resource not accessible by integration
Analyse
Feature flags do not specify a default CLI version. Falling back to the CLI version shipped with the Action. This is 2.18.4.