-
Notifications
You must be signed in to change notification settings - Fork 119
Closed
Labels
Description
Describe the bug
The Visual Studio 2022 extension is not flagging security issues but is flagging them with the Visual Studio Code extension.
To Reproduce
Steps to reproduce the behavior:
- In Visual Studio 2022, create a .NET 7.0 Console Application
- In Program.cs, replace the contents with
using System.Security.Cryptography;
internal class Program
{
private static void Main(string[] args)
{
var hash = MD5.Create();
}
}
Expected behavior
Expected: Visual Studio flags MD5, and other security issues
Actual: Visual Studio is not flagging anything
Screenshots
Left: Visual Studio - Not flagging MD5
Right: Visual Studio Code - Flagging MD5
Versions(please complete the following information):
- OS: Microsoft Windows 11 Enterprise Version 10.0.22621 Build 22621
- Devskim Version: 1.0.15.60829 (Visual Studio), v1.0.15 (VS Code)
Additional context
Another coworker is seeing the same behavior.