{"id":13591009,"url":"https://github.com/microsoft/infersharp","last_synced_at":"2025-04-13T00:42:57.978Z","repository":{"id":38013712,"uuid":"276728418","full_name":"microsoft/infersharp","owner":"microsoft","description":"Infer# is an interprocedural and scalable static code analyzer for C#. Via the capabilities of Facebook's Infer, this tool detects null dereferences, resource leaks, and thread-safety violations. It also performs taint flow tracking to detect critical security vulnerabilities like SQL injections.","archived":false,"fork":false,"pushed_at":"2024-01-16T20:18:49.000Z","size":30674,"stargazers_count":745,"open_issues_count":43,"forks_count":29,"subscribers_count":23,"default_branch":"main","last_synced_at":"2025-04-13T00:42:51.189Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"C#","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/microsoft.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-07-02T19:22:01.000Z","updated_at":"2025-03-29T09:48:54.000Z","dependencies_parsed_at":"2023-02-18T14:01:42.333Z","dependency_job_id":"7fed8e56-7b2c-46b4-88e4-538f667d2106","html_url":"https://github.com/microsoft/infersharp","commit_stats":{"total_commits":131,"total_committers":12,"mean_commits":"10.916666666666666","dds":0.6106870229007634,"last_synced_commit":"57ee288433b2b28cd34dc70862e6e2f0d2475916"},"previous_names":[],"tags_count":8,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Finfersharp","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Finfersharp/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Finfersharp/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Finfersharp/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft","download_url":"https://codeload.github.com/microsoft/infersharp/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248650417,"owners_count":21139672,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-01T16:00:52.713Z","updated_at":"2025-04-13T00:42:57.957Z","avatar_url":"https://github.com/microsoft.png","language":"C#","funding_links":[],"categories":["C\\#","C#","🗒️ Cheatsheets"],"sub_categories":["📦 Libraries"],"readme":"# ![InferSharp icon](/assets/Market_InferSharp_72.png) InferSharp\n\n**InferSharp** (also referred to as Infer#) is an interprocedural and scalable static code analyzer for C#. Via the capabilities of Facebook's [Infer](https://fbinfer.com/), this tool detects race conditions, null pointer dereferences and resource leaks. It also performs [taint flow tracking](https://en.wikipedia.org/wiki/Taint_checking) to detect critical security vulnerabilities like SQL injections. Read more about our approach in the [Wiki page](https://github.com/microsoft/infersharp/wiki/InferSharp:-A-Scalable-Code-Analytics-Tool-for-.NET).\n\nIn addition to implementing the C# frontend, we contributed our [language-agnostic serialization layer](https://github.com/microsoft/infersharp/wiki/InferSharp:-A-Scalable-Code-Analytics-Tool-for-.NET#language-agnostic-representation-of-sil) ([Commit #1361](https://github.com/facebook/infer/commit/285ddb4a98f337a40d61e73b7a0867e44fa4f042)) to facebook/infer, which opens up opportunities for [additional language support](https://github.com/microsoft/infersharp/wiki/InferSharp:-A-Scalable-Code-Analytics-Tool-for-.NET#overview) in the future.\n\nThe latest version is ![GitHub release (latest by date including pre-releases)](https://img.shields.io/github/v/release/microsoft/infersharp?include_prereleases). Please refer to the [release page](https://github.com/microsoft/infersharp/releases) for more information on the changes.\n\n## Public Announcements\n- .NET DevBlogs - [v1.4](https://devblogs.microsoft.com/dotnet/slaying-zombie-no-repo-crashes-with-infersharp/), [v1.2](https://devblogs.microsoft.com/dotnet/infer-v1-2-interprocedural-memory-safety-analysis-for-c/), [v1.0](https://devblogs.microsoft.com/dotnet/infer-interprocedural-memory-safety-analysis-for-c/)\n- [.NET Conf 2022](https://www.youtube.com/watch?v=Bc0Tt0qOMn4)\n- [Facebook Engineering Blog](https://engineering.fb.com/2020/12/14/open-source/infer/)\n- [.NET Community Standup](https://youtu.be/cIB4gxqm6EY?list=PLdo4fOcmZ0oX-DBuRG4u58ZTAJgBAeQ-t\u0026t=147)\n- Visual Studio Toolbox - [YouTube](https://www.youtube.com/watch?v=yNSJv5wN4OA\u0026feature=youtu.be), [Channel9](https://channel9.msdn.com/Shows/Visual-Studio-Toolbox/Analyzing-Code-with-Infer)\n\n## Get Started\n\n- [VS Extension](https://marketplace.visualstudio.com/items?itemName=matthew-jin.infersharp)\n- [VSCode Extension](https://marketplace.visualstudio.com/items?itemName=matthew-jin.infersharp-ext)\n- [Windows Subsystem for Linux](/RUNNING_INFERSHARP_ON_WINDOWS.md)\n- [GitHub Action](https://github.com/marketplace/actions/infersharp)\n- [Azure Pipelines](/.build/azure-pipelines-example-multistage.yml)\n- [Docker](/RUNNING_IN_DOCKER.md)\n\n## Build from Source\nUse this [Dockerfile](/Dockerfile) to build images and binaries from source. It builds the latest code from `microsoft/infersharp:main` + `facebook/infer:main` by default.\n\n## Troubleshooting\nPlease refer to the [troubleshooting guide](TROUBLESHOOTING.md).\n\n## Contributing\n\nWe welcome contributions. Please follow [this guideline](CONTRIBUTING.md).\n\n## Trademarks\n\nThis project may contain trademarks or logos for projects, products, or services. Authorized use of Microsoft trademarks or logos is subject to and must follow Microsoft's Trademark \u0026 Brand Guidelines. Use of Microsoft trademarks or logos in modified versions of this project must not cause confusion or imply Microsoft sponsorship. Any use of third-party trademarks or logos are subject to those third-party's policies.\n\n## Security Reporting Instructions\n\n**Please do not report security vulnerabilities through public GitHub issues.** Instead, please follow [this guideline](SECURITY.md).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmicrosoft%2Finfersharp","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmicrosoft%2Finfersharp","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmicrosoft%2Finfersharp/lists"}