Skip to content

Expand risky-code audit recipes for common dogfooding findings #3385

Description

@Widthdom

Found while dogfooding the current source with cdidx search --recipe risky-code.

The current recipe set is useful but small. During dogfooding, repeated manual searches were needed for patterns like:

  • empty catch blocks
  • broad catch (Exception)
  • ProcessStartInfo / external process launch
  • recursive delete
  • raw ex.Message
  • Timeout.InfiniteTimeSpan
  • path case-sensitivity heuristics
  • direct regex construction / timeout checks

Expected: expand SearchAuditRecipes with these common audit searches, labels, and false-positive guidance.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions