Known Issues
The following are known issues when running Puma Scan.
Running Puma Scan as a NuGet package often causes a number of additional warnings to display in Visual Studio. These messages are usually harmless and do not seem to affect the analysis results.
When running Puma Scan Community as a NuGet package, you may see the below warning message related to the netstandard assembly not being found.
Warning IDE1003 Analyzer assembly 'C:\Users\Eric\.nuget\packages\puma.security.rules\2.1.0\analyzers\dotnet\cs\Microsoft.Web.XmlTransform.dll' depends on 'netstandard, Version=2.0.0.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51' but it was not found. Analyzers may not run correctly unless the missing assembly is added as an analyzer reference as well.
When an analyzer depends on another assembly, then both must be listed as analyzers, but there is generally an exception for the core system assemblies. Unfortunately, it does not appear that .Net Standard 2.0 has been added to the exceptions list; presumably, that will occur at some point in the future. More details here: https://github.com/DotNetAnalyzers/StyleCopAnalyzers/issues/1624#issuecomment-151197400
