microsoft/binskim

View on GitHub

A binary static analysis tool that provides security and correctness results for Windows Portable Executable and *nix ELF binary formats

Stars: 860
Forks: 178
Open beginner issues: 0
Indexed issues: 138
Avg merge: 5d 2h
Merged PRs (30d): 11

Dominant language: C#
License: No license data
Last GitHub push: Sep 16, 2026
Latest indexed: Sep 19, 2026
Contributing guide: No contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

138 open issues indexed

false positive on ELF files Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

microsoft/binskim#1178 · Opened Apr 19, 2026
BA2008 is skipped for Go Windows internal-linker binaries because the PE linker version is 3.0 Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

microsoft/binskim#1176 · 1 comment · Opened Apr 17, 2026
BA3004 reports DWARF version 0 for Go 1.26 Linux ELF binaries that contain DWARF v5 Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

microsoft/binskim#1175 · Opened Apr 17, 2026
ERR997 should not fire on managed resource assemblies (lots of noise) Open

Difficulty 3/5 1-2 days Newbie friendliness 72/100

microsoft/binskim#1173 · 1 comment · Opened Apr 16, 2026
--verbose and --hashes flags missing in AzDo when System.Debug environment var is set Open

Difficulty 3/5 1-2 days Newbie friendliness 52/100

microsoft/binskim#1172 · Opened Apr 14, 2026
BinSkim checks identical files every time, needs to deduplicate by file hash Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

microsoft/binskim#1137 · 3 comments · Opened Jan 21, 2026
DwarfCompilationUnit.GetDebugDataDescription() throws NotImplementedException for .so files compiled on Alpine Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

microsoft/binskim#1136 · 1 comment · Opened Jan 14, 2026
BA2004 EnableSecureSourceCodeHashing is triggered for code that links against msvcmrt.lib Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

microsoft/binskim#1117 · Opened Oct 2, 2025
Couldn't find a valid ICU package installed on the system. Set the configuration flag System.Globalization.Invariant to true if you want to run with no globalization support Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/binskim#1116 · Opened Sep 26, 2025
Sort order isn't deterministic for obj names in rules like BA2004. Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

microsoft/binskim#1115 · Opened Sep 26, 2025
sdl and GF flags in a .sys binary Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

microsoft/binskim#1111 · Opened Sep 11, 2025
Harden baseline testing to fire on additional output delta Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/binskim#1108 · Opened Sep 10, 2025
Ensure Linux baselines are working properly. Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/binskim#1107 · Opened Sep 10, 2025
Request: Support for more operating systems and architectures Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

microsoft/binskim#1094 · Opened Aug 21, 2025
BA2004 only checks the first source code file Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

microsoft/binskim#1091 · 3 comments · Opened Aug 15, 2025
Question: Is it possible to filter for certain rules Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

microsoft/binskim#1090 · Opened Aug 15, 2025
Assemblies are missing version details. Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/binskim#1087 · 2 comments · Opened Aug 7, 2025
[is false-positive error] BA2008 Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

microsoft/binskim#1085 · Opened Aug 4, 2025
"Couldn't find a valid ICU package installed on the system" running Binskim on AzureLinux 3.0 Open

Difficulty 3/5 1-2 days Newbie friendliness 28/100

microsoft/binskim#1073 · 3 comments · 1 reaction · Opened May 7, 2025
BinSkim reports Golang executable built in PIE mode meets rule `BA2001.LoadImageAboveFourGigabyteAddress` Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/binskim#1072 · Opened May 6, 2025
false positive BA2004:Warning_NativeWithInsecureStaticLibraryCompilands for managed C++ (C++/CLI) [w/repro] Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

microsoft/binskim#1068 · Opened Apr 25, 2025
warning BA2024 Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/binskim#1063 · 1 reaction · Opened Apr 8, 2025
[RULE REQUEST] Rewrite BA2022 to perform Authenticode validation without Windows-native dependencies Open

rule-request

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/binskim#1058 · Opened Mar 27, 2025
warning BA6006 Rust debug, suggest that we should use LTCG on debug builgs. Open

rust

microsoft/binskim#1051 · 4 comments · 1 assignee · Opened Feb 28, 2025
Binskim reporting BA2018 for .NET 9 ILOnly assemblies. Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

microsoft/binskim#1021 · 4 comments · Opened Nov 26, 2024
BinSkim wants DWARF 5 but fails when analyzing binary with DWARF 5 Open

rust

microsoft/binskim#1020 · 2 comments · 1 assignee · Opened Oct 31, 2024
DwarfCompilationUnit only collect one or two DwarfSymbols in ReadData method call Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

microsoft/binskim#1010 · Opened Sep 12, 2024
The User Guide doesn't mention ELF support Open

documentation

microsoft/binskim#1009 · 1 assignee · Opened Aug 27, 2024
Binskim reports Error:BA2004 with '/ZH:SHA_256' enabled for Unmanaged c++ dll Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

microsoft/binskim#999 · 6 comments · Opened Jul 2, 2024
Insecure (SHA-1) source code hashing algorithm (BA2004 error) on Visual Basic assembly targeting .NET FX Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/binskim#993 · 3 comments · Opened May 3, 2024
Whether to suppress ‘PDB not found’ errors for stub .exe that invokes the .net core entry point Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/binskim#984 · Opened Feb 13, 2024
[RULE REQUEST] Check for the import of outdated (end-of-life) Visual C++ redistributable DLLs Open

rule-request

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/binskim#982 · Opened Feb 5, 2024
Put evidence of MSVC ASAN utilization in telemetry stream Open

Difficulty 4/5 3-5 days Newbie friendliness 32/100

microsoft/binskim#981 · Opened Jan 30, 2024
BinSkim BA2014 compatibility with the new Arm64EC files Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

microsoft/binskim#979 · Opened Jan 19, 2024
Enabling disabled rules Open

rule-request

Difficulty 2/5 1-3 hours Newbie friendliness 25/100

microsoft/binskim#978 · Opened Jan 18, 2024
BinSkim download from symbol server not working Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/binskim#976 · Opened Dec 5, 2023
Users not able to know which file causes issue when exception loading pdb Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

microsoft/binskim#973 · 1 comment · Opened Nov 6, 2023
BA2025, /CETCOMPAT and .NET Framework Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

microsoft/binskim#972 · Opened Nov 6, 2023
BA2026 is reported as NotApplicable for native PE binaries compiled with /sdl switch Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/binskim#971 · Opened Nov 6, 2023
FailureLevels commandline option does not fully override XML config if both exists Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

microsoft/binskim#948 · 3 comments · Opened Aug 2, 2023
Out of memory exception occurs while inspecting certain binaries during BA2004.EnableSecureSourceCodeHashing rule Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

microsoft/binskim#924 · 3 comments · Opened Jun 14, 2023
Binskim reporting /Qspectre switch not enabled for libxml2-2.11.1 static library even after switch is added Open

Difficulty 4/5 3-5 days Newbie friendliness 28/100

microsoft/binskim#907 · 3 comments · Opened May 23, 2023
BinSkim crashes (AccessViolationException) loading Xamarin.Mac.pdb Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/binskim#881 · 4 comments · Opened May 2, 2023
BA2024 EnableSpectreMitigations - Need to separate guidance into separate messages Open

Difficulty 4/5 3-5 days Newbie friendliness 32/100

microsoft/binskim#854 · Opened Apr 12, 2023
Tracking proposal: new analysis Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

microsoft/binskim#847 · Opened Apr 5, 2023
Binskim not listening all check when all checks should be included Open

4.1

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/binskim#843 · 7 comments · Opened Mar 22, 2023
New rule to address obsolete .Net Framework 1.0 files that do not conform to the NX Compat rules Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/binskim#838 · Opened Mar 16, 2023
BinSkim errors out in presence of expired signing cert. Open

4.1

Difficulty 4/5 3-5 days Newbie friendliness 20/100

microsoft/binskim#816 · 3 comments · Opened Feb 24, 2023
Support Go PDBs Open

rule-request

Difficulty 4/5 3-5 days Newbie friendliness 30/100

microsoft/binskim#806 · 6 comments · 2 reactions · Opened Feb 10, 2023
BA6XXX rules should not return not applicable when pdb not found Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

microsoft/binskim#802 · Opened Feb 1, 2023

microsoft/binskim

Get new issues in your inbox