False positive: Missed 'readonly' opportunity for field used by Interlocked API
Open
acknowledged
C#
false-positive
not security
- Dominant language
- CodeQL
- Stars
- 10.1k
- Forks
- 2.1k
- Avg merge
- 2d 15h
- Merged PRs (30d)
- 141
Description
See https://github.com/sungam3r/SteroidsDI/security/code-scanning/90 and https://github.com/sungam3r/SteroidsDI/security/code-scanning/91
Adding `readonly` yields compiler error.
Contributor guide
Research direction
Review the two linked code-scanning alerts and reproduce the reported compiler error when adding readonly. Trace the CodeQL result for the Interlocked API and define done as preventing this false positive while preserving valid readonly findings.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100