Review implicit SHA-1 DSA signatures

Proprietary

Find resolved DSACryptoServiceProvider SignData(byte[]/Stream), SignData(byte[],int,int), and VerifyData(byte[],byte[]) calls without changing their fixed SHA-1 algorithm, provider or keys. An algorithm upgrade changes existing signature compatibility; a provider replacement can change CSP key-container behavior. Leave explicit-hash overloads, hash-only methods, method groups, lookalikes, unresolved calls and conditional snapshots unchanged. Opt-in review recipe.

OpenRewrite.Recipes.CSharp.Migration.Dotnet.Net6.FindLegacyDsaSignatures
mod run . --recipe=OpenRewrite.Recipes.CSharp.Migration.Dotnet.Net6.FindLegacyDsaSignatures

Install it once, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.