Repository navigation
CodeQL static analysis, a README overhaul, and a real PII-in-logs fix — no breaking API changes.
Added
- CodeQL static analysis (
.github/workflows/codeql.yml), analyzingcsharpvia GitHub's
Advanced Setup, independent of SonarQube Cloud. Runs on push tomain/release/**, on
PRs, weekly on a schedule, and viaworkflow_dispatch.
Changed
- README restructured — a live-demo callout, a grouped feature list, a
MapIdentityApi
compatibility note (verified against ASP.NET Core Identity source), a
providers-at-a-glance table, and a package-ecosystem table. Full per-provider
configuration moved todocs/CONFIGURATION.md.
Fixed
- Recipient email addresses and phone numbers are now masked before being logged, and no
longer appear in exception messages thrown on send failure. Debug-level logging no
longer includes the email/SMS message body or subject line.MaskPhonealways masks,
even for short input. Closes CodeQL'scs/exposure-of-sensitive-informationfindings
from the first scan. Masking is currently hardcoded; making it configurable is tracked
in #18.
Install
dotnet add package DGates.Identity.NotificationProviders --version 1.1.1