Azure / Azure/azure-functions-dotnet-worker
Analyzer to prevent hardcoding raw connection strings to bindings
- Dominant language
- C#
- Stars
- 466
- Forks
- 215
- Avg merge
- 3d 10h
- Merged PRs (30d)
- 7
Description
### Description
Create an analyzer that warns users against hardcoding raw connection strings directly into the `Connection` property of bindings
Example of incorrect usage
```csharp
[Function(nameof(Do))]
public void Do([QueueTrigger("myq",
Connection = "DefaultEndpointsProtocol=https;AccountName=t;AccountKey=yadayada")] QueueMessage m)
{
}
```
Contributor guide
No contributing guide indexed for this repository
Research direction
The issue names no files, tests, or entry points. Start by locating existing analyzer diagnostics and tests in the repository, then use the shown QueueTrigger example as the initial case; done means the analyzer warns when a binding Connection contains a raw connection string.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- security, tooling
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100