CodeGuard.Cli 1.0.0

CodeGuard - DI Lifecycle Auditor

A .NET console tool that uses Roslyn API to analyze C# codebases for Dependency Injection (DI) service lifecycle optimization.

Features

• Service Registration Discovery - Detects AddTransient, AddScoped, AddSingleton, and common extension methods
• Dependency Graph Construction - Builds a graph of service dependencies from constructor analysis
• Captive Dependency Detection - Identifies lifetime mismatches (e.g., Singleton → Transient)
• Scope Leak Detection - Finds Singletons that depend on scoped services like DbContext
• Lifecycle Promotion Recommendations - Suggests safe promotions (Transient → Scoped → Singleton)
• Statelessness Analysis - Analyzes classes to determine if they're safe for longer lifetimes
• Multiple Output Formats - Console, JSON, SARIF, and HTML report formats
• File Export - Save reports to files for sharing or CI integration
• Optional Code Rewriting - Auto-apply lifecycle changes to your codebase

Installation

dotnet tool install --global CodeGuard.Cli

Usage

# Analyze a solution
dotnet codeguard path/to/your/Solution.sln

# Analyze a .slnx solution (XML format)
dotnet codeguard path/to/your/Solution.slnx

# Analyze a single project
dotnet codeguard path/to/your/Project.csproj

# Output as JSON
dotnet codeguard path/to/Solution.sln --format json

# Output as SARIF (for IDE integration)
dotnet codeguard path/to/Solution.sln --format sarif

# Output as HTML (for browser viewing)
dotnet codeguard path/to/Solution.sln --format html

# Export report to file
dotnet codeguard path/to/Solution.sln --format json --output report.json
dotnet codeguard path/to/Solution.sln --format html --output report.html
dotnet codeguard path/to/Solution.sln --format sarif -o results.sarif

# Verbose output
dotnet codeguard path/to/Solution.sln --verbose

# Auto-apply recommended changes
dotnet codeguard path/to/Solution.sln --rewrite

CLI Options

Supported Registration Patterns

CodeGuard detects the following DI registration methods:

Core Methods:

• AddTransient, AddScoped, AddSingleton
• TryAddTransient, TryAddScoped, TryAddSingleton

Common Extensions (Scoped by default):

• AddDbContext, AddDbContextPool, AddDbContextFactory
• AddIdentity, AddIdentityCore, AddDefaultIdentity

Common Extensions (Singleton by default):

• AddHttpClient, AddMemoryCache, AddDistributedMemoryCache
• AddLogging, AddOptions, Configure
• AddHostedService, AddMediatR, AddAutoMapper
• AddSignalR, AddGrpc

Common Extensions (Transient by default):

• AddHttpContextAccessor
• AddControllers, AddControllersWithViews, AddRazorPages, AddMvc

Exit Codes

Example Output

CodeGuard DI Lifecycle Auditor v1.0.0
=====================================

Analyzing: MyApp.sln
Loaded 3 projects, 42 source files

Errors:
  [ERROR] Singleton 'CacheService' depends on Transient 'DataProcessor'
          Chain: CacheService → DataProcessor

Recommendations:
  [Transient] → [Singleton] : UserValidator
    - Class is stateless (no mutable fields)
    - No scope-infected dependencies
    
  [Transient] → [Scoped] : OrderService
    - Class is stateless
    - Depends on DbContext (scope-infected)

Summary: 1 error, 0 warnings, 2 promotion recommendations

Requirements

• .NET 8.0 or later
• MSBuild (included with .NET SDK)

License

MIT