Resolve ILVerify assembly references from `.deps.json`.

[teo-tsirpanis]

An obstacle of using ILVerify is that all references of the assembly must be explicitly specified on the command line. We could take advantage of the AssemblyDependencyResolver class and automatically find the references from the assembly's accompanying .deps.json file if it exists. This would make using ILVerify much more easy.

The main question is how to expose it to the user. A way I thought is to use it if we specify a new switch like --use-deps-json and also have specified only one input file and no --references. If the shape is agreed upon I can implement it.

I couldn't figure out the best area label to add to this issue. If you have write-permissions please help me learn by adding exactly one area label.

Tagging subscribers to this area: @JulieLeeMSFT
See info in area-owners.md if you want to be subscribed.

Issue Details

---

An obstacle of using ILVerify is that all references of the assembly must be explicitly specified on the command line. We could take advantage of the AssemblyDependencyResolver class and automatically find the references from the assembly's accompanying .deps.json file if it exists. This would make using ILVerify much more easy.

The main question is how to expose it to the user. A way I thought is to use it if we specify a new switch like --use-deps-json and also have specified only one input file and no --references. If the shape is agreed upon I can implement it.

Author:	teo-tsirpanis
Assignees:	-
Labels:	untriaged, feature-request, area-ILVerification
Milestone:	-

[jkotas]

AssemblyDependencyResolver class and automatically find the references from the assembly's accompanying .deps.json file if it exists

AssemblyDependencyResolver won't resolve framework references for standalone .dlls, even though they have .deps.json next to them. It means that this would find the framework references only if the .dll was published as self-contained application.

I agree that it would be convenient for ILVerify to have an option to find the framework references for you, but I do not think that the proposed design works.