SEC0120 False positivites when using policy with required authenticated user

[Adishone]

It is possible to add policy to MVC that requires authenticated user:

services.AddMvc(options =>
{
    var policy = new AuthorizationPolicyBuilder()
        .RequireAuthenticatedUser()
        .Build();
    options.Filters.Add(new AuthorizeFilter(policy));
});

With having that set in your application you will receive false positive on all controller endpoints