diff --git a/src/Directory.Build.props b/src/Directory.Build.props
index fcf77ce23e..c686486a81 100644
--- a/src/Directory.Build.props
+++ b/src/Directory.Build.props
@@ -44,6 +44,7 @@
     </ProjectReference>
     <PackageReference Condition="'$(UseStyleCopAnalyzer)' != 'false' and '$(MSBuildProjectExtension)' == '.csproj'"
       Include="StyleCop.Analyzers" Version="1.1.0-beta008" PrivateAssets="All" />
+    <PackageReference Include="Microsoft.CodeAnalysis.FxCopAnalyzers" Version="3.3.0-beta2.final" PrivateAssets="All" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/src/Sdl.Required.Warning.ruleset b/src/Sdl.Required.Warning.ruleset
new file mode 100644
index 0000000000..10d53d3c06
--- /dev/null
+++ b/src/Sdl.Required.Warning.ruleset
@@ -0,0 +1,381 @@
+<?xml version="1.0"?>
+<RuleSet Name="Microsoft SDL Roslyn Rules - Required (Warning) v9.2"
+         Description="This rule set contains all Microsoft SDL required rules for Microsoft.CodeAnalysis.FxCopAnalyzers v3.3.0-beta2.final and Microsoft.Internal.Analyzers v2.6.7, configured to warn rather than error.  Generated 2020-07-14T21:30:16Z."
+         ToolsVersion="15.0">
+
+  <!--
+    This ruleset is intended to enable SDL rules.
+    This ruleset is NOT a reference of available, effective rules.
+    Not all rules mentioned necessarily exist in the latest analyzers.
+  -->
+
+  <Rules AnalyzerId="Internal.Analyzers" RuleNamespace="Internal.Analyzers">
+    <Rule Id="IA5350" Action="Warning" />        <!-- Do Not Use Weak Cryptographic Algorithms -->
+    <Rule Id="IA5351" Action="Warning" />        <!-- Do Not Use Broken Cryptographic Algorithms -->
+    <Rule Id="IA5352" Action="Warning" />        <!-- Do Not Misuse Cryptographic APIs  -->
+    <Rule Id="IA6450" Action="Info" />           <!-- Custom web token handler was found -->
+    <Rule Id="IA6451" Action="Info" />           <!-- Implement required validations for app asserted actor token -->
+    <Rule Id="IA2989" Action="None" />           <!-- Do not use banned insecure deserialization APIs -->
+    <Rule Id="IA2992" Action="None" />           <!-- Do Not Use Banned APIs For Insecure Deserializers -->
+    <Rule Id="IA2993" Action="None" />           <!-- Do Not Use Banned Constructors For Insecure Deserializers -->
+    <Rule Id="IA2994" Action="None" />           <!-- Do Not Use ResourceSet Without ResourceReader -->
+    <Rule Id="IA2995" Action="None" />           <!-- Do Not Use ResourceReader -->
+    <Rule Id="IA2996" Action="None" />           <!-- Do Not Use ResXResourceReader Without ITypeResolutionService -->
+    <Rule Id="IA2997" Action="None" />           <!-- Do Not Use TypeNameHandling Other Than None -->
+    <Rule Id="IA2998" Action="None" />           <!-- Do Not Deserialize With BinaryFormatter Without Binder -->
+    <Rule Id="IA2999" Action="None" />           <!-- Do Not Set BinaryFormatter.Binder to null -->
+    <Rule Id="IA5359" Action="None" />           <!-- Use approved crypto libraries for the supported platform -->
+  </Rules>
+
+  <Rules AnalyzerId="Microsoft.CodeAnalysis.VersionCheckAnalyzer" RuleNamespace="Microsoft.CodeAnalysis.VersionCheckAnalyzer">
+    <Rule Id="CA9999" Action="None" />           <!-- Analyzer version mismatch -->
+  </Rules>
+
+  <Rules AnalyzerId="Microsoft.CodeQuality.Analyzers" RuleNamespace="Microsoft.CodeQuality.Analyzers">
+    <Rule Id="CA1000" Action="None" />           <!-- Do not declare static members on generic types -->
+    <Rule Id="CA1002" Action="None" />           <!-- Do not expose generic lists -->
+    <Rule Id="CA1003" Action="None" />           <!-- Use generic event handler instances -->
+    <Rule Id="CA1005" Action="None" />           <!-- Avoid excessive parameters on generic types -->
+    <Rule Id="CA1008" Action="None" />           <!-- Enums should have zero value -->
+    <Rule Id="CA1010" Action="None" />           <!-- Generic interface should also be implemented -->
+    <Rule Id="CA1012" Action="None" />           <!-- Abstract types should not have public constructors -->
+    <Rule Id="CA1014" Action="None" />           <!-- Mark assemblies with CLSCompliant -->
+    <Rule Id="CA1016" Action="None" />           <!-- Mark assemblies with assembly version -->
+    <Rule Id="CA1017" Action="None" />           <!-- Mark assemblies with ComVisible -->
+    <Rule Id="CA1018" Action="None" />           <!-- Mark attributes with AttributeUsageAttribute -->
+    <Rule Id="CA1021" Action="None" />           <!-- Avoid out parameters -->
+    <Rule Id="CA1024" Action="None" />           <!-- Use properties where appropriate -->
+    <Rule Id="CA1027" Action="None" />           <!-- Mark enums with FlagsAttribute -->
+    <Rule Id="CA1028" Action="None" />           <!-- Enum Storage should be Int32 -->
+    <Rule Id="CA1030" Action="None" />           <!-- Use events where appropriate -->
+    <Rule Id="CA1031" Action="None" />           <!-- Do not catch general exception types -->
+    <Rule Id="CA1033" Action="None" />           <!-- Interface methods should be callable by child types -->
+    <Rule Id="CA1034" Action="None" />           <!-- Nested types should not be visible -->
+    <Rule Id="CA1036" Action="None" />           <!-- Override methods on comparable types -->
+    <Rule Id="CA1040" Action="None" />           <!-- Avoid empty interfaces -->
+    <Rule Id="CA1041" Action="None" />           <!-- Provide ObsoleteAttribute message -->
+    <Rule Id="CA1043" Action="None" />           <!-- Use Integral Or String Argument For Indexers -->
+    <Rule Id="CA1044" Action="None" />           <!-- Properties should not be write only -->
+    <Rule Id="CA1045" Action="None" />           <!-- Do not pass types by reference -->
+    <Rule Id="CA1046" Action="None" />           <!-- Do not overload equality operator on reference types -->
+    <Rule Id="CA1047" Action="None" />           <!-- Do not declare protected member in sealed type -->
+    <Rule Id="CA1050" Action="None" />           <!-- Declare types in namespaces -->
+    <Rule Id="CA1051" Action="None" />           <!-- Do not declare visible instance fields -->
+    <Rule Id="CA1052" Action="None" />           <!-- Static holder types should be Static or NotInheritable -->
+    <Rule Id="CA1054" Action="None" />           <!-- Uri parameters should not be strings -->
+    <Rule Id="CA1055" Action="None" />           <!-- Uri return values should not be strings -->
+    <Rule Id="CA1056" Action="None" />           <!-- Uri properties should not be strings -->
+    <Rule Id="CA1060" Action="None" />           <!-- Move pinvokes to native methods class -->
+    <Rule Id="CA1061" Action="None" />           <!-- Do not hide base class methods -->
+    <Rule Id="CA1062" Action="None" />           <!-- Validate arguments of public methods -->
+    <Rule Id="CA1063" Action="None" />           <!-- Implement IDisposable Correctly -->
+    <Rule Id="CA1064" Action="None" />           <!-- Exceptions should be public -->
+    <Rule Id="CA1066" Action="None" />           <!-- Implement IEquatable when overriding Object.Equals -->
+    <Rule Id="CA1067" Action="None" />           <!-- Override Object.Equals(object) when implementing IEquatable&lt;T&gt; -->
+    <Rule Id="CA1068" Action="None" />           <!-- CancellationToken parameters must come last -->
+    <Rule Id="CA1069" Action="None" />           <!-- Enums values should not be duplicated -->
+    <Rule Id="CA1070" Action="None" />           <!-- Do not declare event fields as virtual -->
+    <Rule Id="CA1501" Action="None" />           <!-- Avoid excessive inheritance -->
+    <Rule Id="CA1502" Action="None" />           <!-- Avoid excessive complexity -->
+    <Rule Id="CA1505" Action="None" />           <!-- Avoid unmaintainable code -->
+    <Rule Id="CA1506" Action="None" />           <!-- Avoid excessive class coupling -->
+    <Rule Id="CA1508" Action="None" />           <!-- Avoid dead conditional code -->
+    <Rule Id="CA1509" Action="None" />           <!-- Invalid entry in code metrics rule specification file -->
+    <Rule Id="CA1700" Action="None" />           <!-- Do not name enum values &apos;Reserved&apos; -->
+    <Rule Id="CA1707" Action="None" />           <!-- Identifiers should not contain underscores -->
+    <Rule Id="CA1708" Action="None" />           <!-- Identifiers should differ by more than case -->
+    <Rule Id="CA1710" Action="None" />           <!-- Identifiers should have correct suffix -->
+    <Rule Id="CA1711" Action="None" />           <!-- Identifiers should not have incorrect suffix -->
+    <Rule Id="CA1712" Action="None" />           <!-- Do not prefix enum values with type name -->
+    <Rule Id="CA1713" Action="None" />           <!-- Events should not have &apos;Before&apos; or &apos;After&apos; prefix -->
+    <Rule Id="CA1714" Action="None" />           <!-- Flags enums should have plural names -->
+    <Rule Id="CA1715" Action="None" />           <!-- Identifiers should have correct prefix -->
+    <Rule Id="CA1716" Action="None" />           <!-- Identifiers should not match keywords -->
+    <Rule Id="CA1717" Action="None" />           <!-- Only FlagsAttribute enums should have plural names -->
+    <Rule Id="CA1720" Action="None" />           <!-- Identifier contains type name -->
+    <Rule Id="CA1721" Action="None" />           <!-- Property names should not match get methods -->
+    <Rule Id="CA1724" Action="None" />           <!-- Type names should not match namespaces -->
+    <Rule Id="CA1725" Action="None" />           <!-- Parameter names should match base declaration -->
+    <Rule Id="CA1801" Action="None" />           <!-- Review unused parameters -->
+    <Rule Id="CA1802" Action="None" />           <!-- Use literals where appropriate -->
+    <Rule Id="CA1805" Action="None" />           <!-- Do not initialize unnecessarily -->
+    <Rule Id="CA1806" Action="None" />           <!-- Do not ignore method results -->
+    <Rule Id="CA1812" Action="None" />           <!-- Avoid uninstantiated internal classes -->
+    <Rule Id="CA1814" Action="None" />           <!-- Prefer jagged arrays over multidimensional -->
+    <Rule Id="CA1815" Action="None" />           <!-- Override equals and operator equals on value types -->
+    <Rule Id="CA1819" Action="None" />           <!-- Properties should not return arrays -->
+    <Rule Id="CA1821" Action="None" />           <!-- Remove empty Finalizers -->
+    <Rule Id="CA1822" Action="None" />           <!-- Mark members as static -->
+    <Rule Id="CA1823" Action="None" />           <!-- Avoid unused private fields -->
+    <Rule Id="CA2007" Action="None" />           <!-- Consider calling ConfigureAwait on the awaited task -->
+    <Rule Id="CA2011" Action="None" />           <!-- Avoid infinite recursion -->
+    <Rule Id="CA2109" Action="None" />           <!-- Review visible event handlers -->
+    <Rule Id="CA2119" Action="None" />           <!-- Seal methods that satisfy private interfaces -->
+    <Rule Id="CA2211" Action="None" />           <!-- Non-constant fields should not be visible -->
+    <Rule Id="CA2214" Action="None" />           <!-- Do not call overridable methods in constructors -->
+    <Rule Id="CA2217" Action="None" />           <!-- Do not mark enums with FlagsAttribute -->
+    <Rule Id="CA2219" Action="None" />           <!-- Do not raise exceptions in finally clauses -->
+    <Rule Id="CA2225" Action="None" />           <!-- Operator overloads have named alternates -->
+    <Rule Id="CA2226" Action="None" />           <!-- Operators should have symmetrical overloads -->
+    <Rule Id="CA2227" Action="None" />           <!-- Collection properties should be read only -->
+    <Rule Id="CA2231" Action="None" />           <!-- Overload operator equals on overriding value type Equals -->
+    <Rule Id="CA2244" Action="None" />           <!-- Do not duplicate indexed element initializations -->
+    <Rule Id="CA2245" Action="None" />           <!-- Do not assign a property to itself. -->
+    <Rule Id="CA2246" Action="None" />           <!-- Assigning symbol and its member in the same statement. -->
+  </Rules>
+
+  <Rules AnalyzerId="Microsoft.CodeQuality.CSharp.Analyzers" RuleNamespace="Microsoft.CodeQuality.CSharp.Analyzers">
+    <Rule Id="CA1001" Action="None" />           <!-- Types that own disposable fields should be disposable -->
+    <Rule Id="CA1019" Action="None" />           <!-- Define accessors for attribute arguments -->
+    <Rule Id="CA1032" Action="None" />           <!-- Implement standard exception constructors -->
+    <Rule Id="CA1065" Action="None" />           <!-- Do not raise exceptions in unexpected locations -->
+    <Rule Id="CA1200" Action="None" />           <!-- Avoid using cref tags with a prefix -->
+    <Rule Id="CA1507" Action="None" />           <!-- Use nameof to express symbol names -->
+    <Rule Id="CA2200" Action="None" />           <!-- Rethrow to preserve stack details. -->
+    <Rule Id="CA2234" Action="None" />           <!-- Pass system uri objects instead of strings -->
+    <Rule Id="Async001" Action="None" />
+    <Rule Id="Async002" Action="None" />
+    <Rule Id="Async003" Action="None" />
+    <Rule Id="Async004" Action="None" />
+    <Rule Id="Async005" Action="None" />
+    <Rule Id="Async006" Action="None" />
+  </Rules>
+
+  <Rules AnalyzerId="Microsoft.CodeQuality.VisualBasic.Analyzers" RuleNamespace="Microsoft.CodeQuality.VisualBasic.Analyzers">
+    <Rule Id="CA1001" Action="None" />           <!-- Types that own disposable fields should be disposable -->
+    <Rule Id="CA1019" Action="None" />           <!-- Define accessors for attribute arguments -->
+    <Rule Id="CA1032" Action="None" />           <!-- Implement standard exception constructors -->
+    <Rule Id="CA1065" Action="None" />           <!-- Do not raise exceptions in unexpected locations -->
+    <Rule Id="CA1200" Action="None" />           <!-- Avoid using cref tags with a prefix -->
+    <Rule Id="CA1507" Action="None" />           <!-- Use nameof to express symbol names -->
+    <Rule Id="CA2200" Action="None" />           <!-- Rethrow to preserve stack details. -->
+    <Rule Id="CA2218" Action="None" />           <!-- Override GetHashCode on overriding Equals -->
+    <Rule Id="CA2224" Action="None" />           <!-- Override Equals on overloading operator equals -->
+    <Rule Id="CA2234" Action="None" />           <!-- Pass system uri objects instead of strings -->
+    <Rule Id="Async001" Action="None" />
+    <Rule Id="Async002" Action="None" />
+    <Rule Id="Async003" Action="None" />
+    <Rule Id="Async004" Action="None" />
+    <Rule Id="Async005" Action="None" />
+    <Rule Id="Async006" Action="None" />
+  </Rules>
+
+  <Rules AnalyzerId="Microsoft.NetCore.Analyzers" RuleNamespace="Microsoft.NetCore.Analyzers">
+    <Rule Id="CA2301" Action="Warning" />        <!-- Do not call BinaryFormatter.Deserialize without first setting BinaryFormatter.Binder -->
+    <Rule Id="CA2302" Action="Warning" />        <!-- Ensure BinaryFormatter.Binder is set before calling BinaryFormatter.Deserialize -->
+    <Rule Id="CA2305" Action="Warning" />        <!-- Do not use insecure deserializer LosFormatter -->
+    <Rule Id="CA2311" Action="Warning" />        <!-- Do not deserialize without first setting NetDataContractSerializer.Binder -->
+    <Rule Id="CA2312" Action="Warning" />        <!-- Ensure NetDataContractSerializer.Binder is set before deserializing -->
+    <Rule Id="CA2315" Action="Warning" />        <!-- Do not use insecure deserializer ObjectStateFormatter -->
+    <Rule Id="CA2321" Action="Warning" />        <!-- Do not deserialize with JavaScriptSerializer using a SimpleTypeResolver -->
+    <Rule Id="CA2327" Action="Warning" />        <!-- Do not use insecure JsonSerializerSettings -->
+    <Rule Id="CA2328" Action="Warning" />        <!-- Ensure that JsonSerializerSettings are secure -->
+    <Rule Id="CA2329" Action="Warning" />        <!-- Do not deserialize with JsonSerializer using an insecure configuration -->
+    <Rule Id="CA2330" Action="Warning" />        <!-- Ensure that JsonSerializer has a secure configuration when deserializing -->
+    <Rule Id="CA3061" Action="Warning" />        <!-- Do Not Add Schema By URL -->
+    <Rule Id="CA5350" Action="Warning" />        <!-- Do Not Use Weak Cryptographic Algorithms -->
+    <Rule Id="CA5351" Action="Warning" />        <!-- Do Not Use Broken Cryptographic Algorithms -->
+    <Rule Id="CA5358" Action="Warning" />        <!-- Review cipher mode usage with cryptography experts -->
+    <Rule Id="CA5361" Action="Warning" />        <!-- Do Not Disable SChannel Use of Strong Crypto -->
+    <Rule Id="CA5364" Action="Warning" />        <!-- Do Not Use Deprecated Security Protocols -->
+    <Rule Id="CA5378" Action="Warning" />        <!-- Do not disable ServicePointManagerSecurityProtocols -->
+    <Rule Id="CA5397" Action="Warning" />        <!-- Do not use deprecated SslProtocols values -->
+    <Rule Id="CA2322" Action="Info" />           <!-- Ensure JavaScriptSerializer is not initialized with SimpleTypeResolver before deserializing -->
+    <Rule Id="CA2350" Action="Info" />           <!-- Do not use insecure deserialization with DataTable.ReadXml() -->
+    <Rule Id="CA2351" Action="Info" />           <!-- Do not use insecure deserialization with DataSet.ReadXml() -->
+    <Rule Id="CA2352" Action="Info" />           <!-- Unsafe DataSet or DataTable in serializable type can be vulnerable to remote code execution attacks -->
+    <Rule Id="CA2353" Action="Info" />           <!-- Unsafe DataSet or DataTable in serializable type -->
+    <Rule Id="CA2354" Action="Info" />           <!-- Unsafe DataSet or DataTable in deserialized object graph can be vulnerable to remote code execution attacks -->
+    <Rule Id="CA2355" Action="Info" />           <!-- Unsafe DataSet or DataTable type found in deserializable object graph -->
+    <Rule Id="CA2356" Action="Info" />           <!-- Unsafe DataSet or DataTable type in web deserializable object graph -->
+    <Rule Id="CA3001" Action="Info" />           <!-- Review code for SQL injection vulnerabilities -->
+    <Rule Id="CA3002" Action="Info" />           <!-- Review code for XSS vulnerabilities -->
+    <Rule Id="CA3003" Action="Info" />           <!-- Review code for file path injection vulnerabilities -->
+    <Rule Id="CA3004" Action="Info" />           <!-- Review code for information disclosure vulnerabilities -->
+    <Rule Id="CA3005" Action="Info" />           <!-- Review code for LDAP injection vulnerabilities -->
+    <Rule Id="CA3006" Action="Info" />           <!-- Review code for process command injection vulnerabilities -->
+    <Rule Id="CA3007" Action="Info" />           <!-- Review code for open redirect vulnerabilities -->
+    <Rule Id="CA3008" Action="Info" />           <!-- Review code for XPath injection vulnerabilities -->
+    <Rule Id="CA3009" Action="Info" />           <!-- Review code for XML injection vulnerabilities -->
+    <Rule Id="CA3010" Action="Info" />           <!-- Review code for XAML injection vulnerabilities -->
+    <Rule Id="CA3011" Action="Info" />           <!-- Review code for DLL injection vulnerabilities -->
+    <Rule Id="CA3012" Action="Info" />           <!-- Review code for regex injection vulnerabilities -->
+    <Rule Id="CA5359" Action="Info" />           <!-- Do Not Disable Certificate Validation -->
+    <Rule Id="CA5380" Action="Info" />           <!-- Do Not Add Certificates To Root Store -->
+    <Rule Id="CA5381" Action="Info" />           <!-- Ensure Certificates Are Not Added To Root Store -->
+    <Rule Id="CA5386" Action="Info" />           <!-- Avoid hardcoding SecurityProtocolType value -->
+    <Rule Id="CA5391" Action="Info" />           <!-- Use antiforgery tokens in ASP.NET Core MVC controllers -->
+    <Rule Id="CA5395" Action="Info" />           <!-- Miss HttpVerb attribute for action methods -->
+    <Rule Id="CA5396" Action="Info" />           <!-- Set HttpOnly to true for HttpCookie -->
+    <Rule Id="CA5398" Action="Info" />           <!-- Avoid hardcoded SslProtocols values -->
+    <Rule Id="CA1303" Action="None" />           <!-- Do not pass literals as localized parameters -->
+    <Rule Id="CA1304" Action="None" />           <!-- Specify CultureInfo -->
+    <Rule Id="CA1305" Action="None" />           <!-- Specify IFormatProvider -->
+    <Rule Id="CA1307" Action="None" />           <!-- Specify StringComparison -->
+    <Rule Id="CA1308" Action="None" />           <!-- Normalize strings to uppercase -->
+    <Rule Id="CA1401" Action="None" />           <!-- P/Invokes should not be visible -->
+    <Rule Id="CA1810" Action="None" />           <!-- Initialize reference type static fields inline -->
+    <Rule Id="CA1813" Action="None" />           <!-- Avoid unsealed attributes -->
+    <Rule Id="CA1816" Action="None" />           <!-- Dispose methods should call SuppressFinalize -->
+    <Rule Id="CA1820" Action="None" />           <!-- Test for empty strings using string length -->
+    <Rule Id="CA1826" Action="None" />           <!-- Do not use Enumerable methods on indexable collections. Instead use the collection directly -->
+    <Rule Id="CA1827" Action="None" />           <!-- Do not use Count() or LongCount() when Any() can be used -->
+    <Rule Id="CA1828" Action="None" />           <!-- Do not use CountAsync() or LongCountAsync() when AnyAsync() can be used -->
+    <Rule Id="CA1829" Action="None" />           <!-- Use Length/Count property instead of Count() when available -->
+    <Rule Id="CA1830" Action="None" />           <!-- Prefer strongly-typed Append and Insert method overloads on StringBuilder. -->
+    <Rule Id="CA1831" Action="None" />           <!-- Use AsSpan or AsMemory instead of Range-based indexers when appropriate -->
+    <Rule Id="CA1832" Action="None" />           <!-- Use AsSpan or AsMemory instead of Range-based indexers when appropriate -->
+    <Rule Id="CA1833" Action="None" />           <!-- Use AsSpan or AsMemory instead of Range-based indexers when appropriate -->
+    <Rule Id="CA1834" Action="None" />           <!-- Consider using &apos;StringBuilder.Append(char)&apos; when applicable. -->
+    <Rule Id="CA1835" Action="None" />           <!-- Prefer the &apos;Memory&apos;-based overloads for &apos;ReadAsync&apos; and &apos;WriteAsync&apos; -->
+    <Rule Id="CA1836" Action="None" />           <!-- Prefer IsEmpty over Count -->
+    <Rule Id="CA2000" Action="None" />           <!-- Dispose objects before losing scope -->
+    <Rule Id="CA2002" Action="None" />           <!-- Do not lock on objects with weak identity -->
+    <Rule Id="CA2008" Action="None" />           <!-- Do not create tasks without passing a TaskScheduler -->
+    <Rule Id="CA2009" Action="None" />           <!-- Do not call ToImmutableCollection on an ImmutableCollection value -->
+    <Rule Id="CA2012" Action="None" />           <!-- Use ValueTasks correctly -->
+    <Rule Id="CA2013" Action="None" />           <!-- Do not use ReferenceEquals with value types -->
+    <Rule Id="CA2014" Action="None" />           <!-- Do not use stackalloc in loops. -->
+    <Rule Id="CA2015" Action="None" />           <!-- Do not define finalizers for types derived from MemoryManager&lt;T&gt; -->
+    <Rule Id="CA2100" Action="None" />           <!-- Review SQL queries for security vulnerabilities -->
+    <Rule Id="CA2101" Action="None" />           <!-- Specify marshaling for P/Invoke string arguments -->
+    <Rule Id="CA2201" Action="None" />           <!-- Do not raise reserved exception types -->
+    <Rule Id="CA2207" Action="None" />           <!-- Initialize value type static fields inline -->
+    <Rule Id="CA2208" Action="None" />           <!-- Instantiate argument exceptions correctly -->
+    <Rule Id="CA2213" Action="None" />           <!-- Disposable fields should be disposed -->
+    <Rule Id="CA2215" Action="None" />           <!-- Dispose methods should call base class dispose -->
+    <Rule Id="CA2216" Action="None" />           <!-- Disposable types should declare finalizer -->
+    <Rule Id="CA2229" Action="None" />           <!-- Implement serialization constructors -->
+    <Rule Id="CA2235" Action="None" />           <!-- Mark all non-serializable fields -->
+    <Rule Id="CA2237" Action="None" />           <!-- Mark ISerializable types with serializable -->
+    <Rule Id="CA2241" Action="None" />           <!-- Provide correct arguments to formatting methods -->
+    <Rule Id="CA2242" Action="None" />           <!-- Test for NaN correctly -->
+    <Rule Id="CA2243" Action="None" />           <!-- Attribute string literals should parse correctly -->
+    <Rule Id="CA2247" Action="None" />           <!-- Argument passed to TaskCompletionSource constructor should be TaskCreationOptions enum instead of TaskContinuationOptions enum. -->
+    <Rule Id="CA2248" Action="None" />           <!-- Provide correct &apos;enum&apos; argument to &apos;Enum.HasFlag&apos; -->
+    <Rule Id="CA2249" Action="None" />           <!-- Consider using &apos;string.Contains&apos; instead of &apos;string.IndexOf&apos; -->
+    <Rule Id="CA2300" Action="None" />           <!-- Do not use insecure deserializer BinaryFormatter -->
+    <Rule Id="CA2310" Action="None" />           <!-- Do not use insecure deserializer NetDataContractSerializer -->
+    <Rule Id="CA2326" Action="None" />           <!-- Do not use TypeNameHandling values other than None -->
+    <Rule Id="CA5360" Action="None" />           <!-- Do Not Call Dangerous Methods In Deserialization -->
+    <Rule Id="CA5362" Action="None" />           <!-- Potential reference cycle in deserialized object graph -->
+    <Rule Id="CA5363" Action="None" />           <!-- Do Not Disable Request Validation -->
+    <Rule Id="CA5365" Action="None" />           <!-- Do Not Disable HTTP Header Checking -->
+    <Rule Id="CA5366" Action="None" />           <!-- Use XmlReader For DataSet Read Xml -->
+    <Rule Id="CA5367" Action="None" />           <!-- Do Not Serialize Types With Pointer Fields -->
+    <Rule Id="CA5368" Action="None" />           <!-- Set ViewStateUserKey For Classes Derived From Page -->
+    <Rule Id="CA5369" Action="None" />           <!-- Use XmlReader For Deserialize -->
+    <Rule Id="CA5370" Action="None" />           <!-- Use XmlReader For Validating Reader -->
+    <Rule Id="CA5371" Action="None" />           <!-- Use XmlReader For Schema Read -->
+    <Rule Id="CA5372" Action="None" />           <!-- Use XmlReader For XPathDocument -->
+    <Rule Id="CA5373" Action="None" />           <!-- Do not use obsolete key derivation function -->
+    <Rule Id="CA5374" Action="None" />           <!-- Do Not Use XslTransform -->
+    <Rule Id="CA5375" Action="None" />           <!-- Do Not Use Account Shared Access Signature -->
+    <Rule Id="CA5376" Action="None" />           <!-- Use SharedAccessProtocol HttpsOnly -->
+    <Rule Id="CA5377" Action="None" />           <!-- Use Container Level Access Policy -->
+    <Rule Id="CA5379" Action="None" />           <!-- Do Not Use Weak Key Derivation Function Algorithm -->
+    <Rule Id="CA5382" Action="None" />           <!-- Use Secure Cookies In ASP.Net Core -->
+    <Rule Id="CA5383" Action="None" />           <!-- Ensure Use Secure Cookies In ASP.Net Core -->
+    <Rule Id="CA5384" Action="None" />           <!-- Do Not Use Digital Signature Algorithm (DSA) -->
+    <Rule Id="CA5385" Action="None" />           <!-- Use Rivest–Shamir–Adleman (RSA) Algorithm With Sufficient Key Size -->
+    <Rule Id="CA5387" Action="None" />           <!-- Do Not Use Weak Key Derivation Function With Insufficient Iteration Count -->
+    <Rule Id="CA5388" Action="None" />           <!-- Ensure Sufficient Iteration Count When Using Weak Key Derivation Function -->
+    <Rule Id="CA5389" Action="None" />           <!-- Do Not Add Archive Item&apos;s Path To The Target File System Path -->
+    <Rule Id="CA5390" Action="None" />           <!-- Do not hard-code encryption key -->
+    <Rule Id="CA5392" Action="None" />           <!-- Use DefaultDllImportSearchPaths attribute for P/Invokes -->
+    <Rule Id="CA5393" Action="None" />           <!-- Do not use unsafe DllImportSearchPath value -->
+    <Rule Id="CA5394" Action="None" />           <!-- Do not use insecure randomness -->
+    <Rule Id="CA5399" Action="None" />           <!-- HttpClients should enable certificate revocation list checks -->
+    <Rule Id="CA5400" Action="None" />           <!-- Ensure HttpClient certificate revocation list check is not disabled -->
+    <Rule Id="CA5401" Action="None" />           <!-- Do not use CreateEncryptor with non-default IV -->
+    <Rule Id="CA5402" Action="None" />           <!-- Use CreateEncryptor with the default IV  -->
+    <Rule Id="CA5403" Action="None" />           <!-- Do not hard-code certificate -->
+  </Rules>
+
+  <Rules AnalyzerId="Microsoft.NetCore.CSharp.Analyzers" RuleNamespace="Microsoft.NetCore.CSharp.Analyzers">
+    <Rule Id="CA1309" Action="None" />           <!-- Use ordinal stringcomparison -->
+    <Rule Id="CA1824" Action="None" />           <!-- Mark assemblies with NeutralResourcesLanguageAttribute -->
+    <Rule Id="CA1825" Action="None" />           <!-- Avoid zero-length array allocations. -->
+    <Rule Id="CA2016" Action="None" />           <!-- Forward the &apos;CancellationToken&apos; parameter to methods that take one -->
+    <Rule Id="CA2010" Action="None" />
+  </Rules>
+
+  <Rules AnalyzerId="Microsoft.NetCore.VisualBasic.Analyzers" RuleNamespace="Microsoft.NetCore.VisualBasic.Analyzers">
+    <Rule Id="CA1309" Action="None" />           <!-- Use ordinal stringcomparison -->
+    <Rule Id="CA1824" Action="None" />           <!-- Mark assemblies with NeutralResourcesLanguageAttribute -->
+    <Rule Id="CA1825" Action="None" />           <!-- Avoid zero-length array allocations. -->
+    <Rule Id="CA2016" Action="None" />           <!-- Forward the &apos;CancellationToken&apos; parameter to methods that take one -->
+    <Rule Id="CA2010" Action="None" />
+  </Rules>
+
+  <Rules AnalyzerId="Microsoft.NetFramework.Analyzers" RuleNamespace="Microsoft.NetFramework.Analyzers">
+    <Rule Id="CA2153" Action="Warning" />        <!-- Do Not Catch Corrupted State Exceptions -->
+    <Rule Id="CA3075" Action="Warning" />        <!-- Insecure DTD processing in XML -->
+    <Rule Id="CA3147" Action="Warning" />        <!-- Mark Verb Handlers With Validate Antiforgery Token -->
+    <Rule Id="CA1058" Action="None" />           <!-- Types should not extend certain base types -->
+  </Rules>
+
+  <Rules AnalyzerId="Microsoft.NetFramework.CSharp.Analyzers" RuleNamespace="Microsoft.NetFramework.CSharp.Analyzers">
+    <Rule Id="CA3076" Action="Warning" />        <!-- Insecure XSLT script processing. -->
+    <Rule Id="CA3077" Action="Warning" />        <!-- Insecure Processing in API Design, XmlDocument and XmlTextReader -->
+  </Rules>
+
+  <Rules AnalyzerId="Microsoft.NetFramework.VisualBasic.Analyzers" RuleNamespace="Microsoft.NetFramework.VisualBasic.Analyzers">
+    <Rule Id="CA3076" Action="Warning" />        <!-- Insecure XSLT script processing. -->
+    <Rule Id="CA3077" Action="Warning" />        <!-- Insecure Processing in API Design, XmlDocument and XmlTextReader -->
+  </Rules>
+
+
+  <!-- Ancient analyzers, which older Internal.Analyzers packages may have referenced -->
+  <Rules AnalyzerId="Microsoft.CodeAnalysis.Analyzers" RuleNamespace="Microsoft.CodeAnalysis.Analyzers">
+    <Rule Id="RS1000" Action="None" />
+    <Rule Id="RS1001" Action="None" />
+    <Rule Id="RS1002" Action="None" />
+    <Rule Id="RS1003" Action="None" />
+    <Rule Id="RS1004" Action="None" />
+    <Rule Id="RS1005" Action="None" />
+    <Rule Id="RS1006" Action="None" />
+    <Rule Id="RS1007" Action="None" />
+    <Rule Id="RS1008" Action="None" />
+    <Rule Id="RS1009" Action="None" />
+    <Rule Id="RS1010" Action="None" />
+    <Rule Id="RS1011" Action="None" />
+    <Rule Id="RS1012" Action="None" />
+    <Rule Id="RS1013" Action="None" />
+    <Rule Id="RS1014" Action="None" />
+  </Rules>
+  <Rules AnalyzerId="Microsoft.CodeAnalysis.CSharp.Analyzers" RuleNamespace="Microsoft.CodeAnalysis.CSharp.Analyzers">
+    <Rule Id="RS1000" Action="None" />
+    <Rule Id="RS1001" Action="None" />
+    <Rule Id="RS1002" Action="None" />
+    <Rule Id="RS1003" Action="None" />
+    <Rule Id="RS1004" Action="None" />
+    <Rule Id="RS1005" Action="None" />
+    <Rule Id="RS1006" Action="None" />
+    <Rule Id="RS1007" Action="None" />
+    <Rule Id="RS1008" Action="None" />
+    <Rule Id="RS1009" Action="None" />
+    <Rule Id="RS1010" Action="None" />
+    <Rule Id="RS1011" Action="None" />
+    <Rule Id="RS1012" Action="None" />
+    <Rule Id="RS1013" Action="None" />
+    <Rule Id="RS1014" Action="None" />
+  </Rules>
+  <Rules AnalyzerId="Microsoft.CodeAnalysis.VisualBasic.Analyzers" RuleNamespace="Microsoft.CodeAnalysis.VisualBasic.Analyzers">
+    <Rule Id="RS1000" Action="None" />
+    <Rule Id="RS1001" Action="None" />
+    <Rule Id="RS1002" Action="None" />
+    <Rule Id="RS1003" Action="None" />
+    <Rule Id="RS1004" Action="None" />
+    <Rule Id="RS1005" Action="None" />
+    <Rule Id="RS1006" Action="None" />
+    <Rule Id="RS1007" Action="None" />
+    <Rule Id="RS1008" Action="None" />
+    <Rule Id="RS1009" Action="None" />
+    <Rule Id="RS1010" Action="None" />
+    <Rule Id="RS1011" Action="None" />
+    <Rule Id="RS1012" Action="None" />
+    <Rule Id="RS1013" Action="None" />
+    <Rule Id="RS1014" Action="None" />
+  </Rules>
+</RuleSet>
diff --git a/src/Source.ruleset b/src/Source.ruleset
index 379dc7a8be..f142093d13 100644
--- a/src/Source.ruleset
+++ b/src/Source.ruleset
@@ -4,16 +4,20 @@
     <Name Resource="MinimumRecommendedRules_Name" />
     <Description Resource="MinimumRecommendedRules_Description" />
   </Localization>
+  <Include Path="Sdl.Required.Warning.ruleset" Action="Default" />
   <Rules AnalyzerId="Microsoft.Analyzers.ManagedCodeAnalysis" RuleNamespace="Microsoft.Rules.Managed">
-    <Rule Id="CA1001" Action="Warning" />
+    <!-- Some of the rules below were desabled as explained on https://github.com/dotnet/machinelearning/issues/5334 -->
+    <!-- It might be good to have a second look and reenable them, making the appropiate changes on ML.NET to comply by them in the future-->
+    <!-- In particular the ones marked as "Might fix" -->
+    <!-- <Rule Id="CA1001" Action="Warning" /> Disable. Don't Fix -->
     <Rule Id="CA1009" Action="Warning" />
     <Rule Id="CA1016" Action="Warning" />
-    <Rule Id="CA1033" Action="Warning" />
+    <!-- <Rule Id="CA1033" Action="Warning" /> Disable. Don't Fix -->
     <Rule Id="CA1049" Action="Warning" />
-    <Rule Id="CA1060" Action="Warning" />
+    <!-- <Rule Id="CA1060" Action="Warning" /> Disable. Might Fix -->
     <Rule Id="CA1061" Action="Warning" />
-    <Rule Id="CA1063" Action="Warning" />
-    <Rule Id="CA1065" Action="Warning" />
+    <!-- <Rule Id="CA1063" Action="Warning" /> Disable. Don't Fix -->
+    <!-- <Rule Id="CA1065" Action="Warning" /> Disable. Might Fix -->
     <Rule Id="CA1301" Action="Warning" />
     <Rule Id="CA1400" Action="Warning" />
     <Rule Id="CA1401" Action="Warning" />
@@ -25,9 +29,9 @@
     <Rule Id="CA1821" Action="Warning" />
     <Rule Id="CA1900" Action="Warning" />
     <Rule Id="CA1901" Action="Warning" />
-    <Rule Id="CA2002" Action="Warning" />
-    <Rule Id="CA2100" Action="Warning" />
-    <Rule Id="CA2101" Action="Warning" />
+    <!-- <Rule Id="CA2002" Action="Warning" /> Disable. Might Fix -->
+    <!-- <Rule Id="CA2100" Action="Warning" /> Should we disable this? It seems security related but not included on the Sdl.Required.Warning.ruleset -->
+    <!-- <Rule Id="CA2101" Action="Warning" /> Disable. Might Fix -->
     <Rule Id="CA2108" Action="Warning" />
     <Rule Id="CA2111" Action="Warning" />
     <Rule Id="CA2112" Action="Warning" />
@@ -53,12 +57,12 @@
     <Rule Id="CA2202" Action="Warning" />
     <Rule Id="CA2207" Action="Warning" />
     <Rule Id="CA2212" Action="Warning" />
-    <Rule Id="CA2213" Action="Warning" />
-    <Rule Id="CA2214" Action="Warning" />
+    <!-- <Rule Id="CA2213" Action="Warning" /> Disable. Don't fix -->
+    <!-- <Rule Id="CA2214" Action="Warning" /> Disable. Don't Fix -->
     <Rule Id="CA2216" Action="Warning" />
     <Rule Id="CA2220" Action="Warning" />
     <Rule Id="CA2229" Action="Warning" />
-    <Rule Id="CA2231" Action="Warning" />
+    <!-- <Rule Id="CA2231" Action="Warning" /> Disable. Might fix -->
     <Rule Id="CA2232" Action="Warning" />
     <Rule Id="CA2235" Action="Warning" />
     <Rule Id="CA2236" Action="Warning" />