Find hardcoded cipher suite choices

Proprietary

Find TLS cipher suite lists fixed in source with new CipherSuitesPolicy(...). A fixed list of cipher suites prevents adopting new suites, including those used with post-quantum key exchange, without a code change.

OpenRewrite.CSharp.Recipes.Cryptography.FindHardcodedCipherSuiteChoice
mod run . --recipe=OpenRewrite.CSharp.Recipes.Cryptography.FindHardcodedCipherSuiteChoice

Install it once, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.