From 43ec7ac1db681c62eadb4b1acff63e593a1e15b8 Mon Sep 17 00:00:00 2001
From: Scott Willcox <Scott.Willcox@deltares.nl>
Date: Tue, 23 Dec 2025 09:27:38 +0100
Subject: [PATCH] DHYDROGUI-766 Configure .NET analyzers for security and FIPS
 compliance

Technically the WarningsAsErrors is not needed. They have been defined so it is explicit.
---
 Directory.Build.props    | 8 ++++++++
 Directory.Packages.props | 1 +
 2 files changed, 9 insertions(+)

diff --git a/Directory.Build.props b/Directory.Build.props
index fb428cb..3797509 100644
--- a/Directory.Build.props
+++ b/Directory.Build.props
@@ -10,4 +10,12 @@
 		<Version>$(MeshKernelNETVersion).$(BuildNumber)</Version>
 		<FileVersion>$(Version)</FileVersion>
 	</PropertyGroup>
+
+	<PropertyGroup>
+		<!-- DHYDROGUI-766 - Enable Security Analyzers and FIPS compliance. Treat weak/broken crypto usage as errors -->
+		<EnableNETAnalyzers>true</EnableNETAnalyzers>
+		<AnalysisMode>Security</AnalysisMode>
+		<AnalysisLevel>latest</AnalysisLevel>
+		<WarningsAsErrors>$(WarningsAsErrors);CA5350;CA5351</WarningsAsErrors>
+	</PropertyGroup>
 </Project>
\ No newline at end of file
diff --git a/Directory.Packages.props b/Directory.Packages.props
index 2ca5b3c..8ee6524 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -8,6 +8,7 @@
     <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="17.13.0" />
     <PackageVersion Include="NetTopologySuite" Version="1.15.0" />
     <PackageVersion Include="coverlet.collector" Version="6.0.4" />
+    <PackageVersion Include="Microsoft.CodeAnalysis.NetAnalyzers" Version="8.0.0" />
     <PackageVersion Include="Microsoft.CodeAnalysis.CSharp" Version="4.11.0" />
     <PackageVersion Include="NUnit" Version="4.3.2" />
     <PackageVersion Include="NUnit.Analyzers" Version="4.7.0" />