Azure / Azure/azure-functions-dotnet-worker

Analyzer to prevent hardcoding raw connection strings to bindings

Open
#3,074 0 comments 0 reactions 0 assignees View on GitHub
enhancement good first issue supportability: analyzer
Dominant language
C#
Stars
466
Forks
215
Avg merge
3d 10h
Merged PRs (30d)
7

Description

### Description

Create an analyzer that warns users against hardcoding raw connection strings directly into the `Connection` property of bindings

Example of incorrect usage

```csharp
[Function(nameof(Do))]
public void Do([QueueTrigger("myq",
Connection = "DefaultEndpointsProtocol=https;AccountName=t;AccountKey=yadayada")] QueueMessage m)
{

}
```

Contributor guide

No contributing guide indexed for this repository

Research direction

The issue names no files, tests, or entry points. Start by locating existing analyzer diagnostics and tests in the repository, then use the shown QueueTrigger example as the initial case; done means the analyzer warns when a binding Connection contains a raw connection string.

Written by the indexing model from the issue text.

Assessment

Tech stack
csharp
Domain
security, tooling
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.