Hello,
unfortunately our project is private. I had a closer look at the documentation last night and came to the same conclusion: somehow the issue is related to the vulnerabilities rules.
I’ve created a new C# ruleset and deactivated all vulnerabilities rules but the following:
- Fields should not have public accessibility
- Generic exceptions should not be ignored
- Mutable fields should not be “public static”
Runtime of the analysis step is down to 3 minutes again. I’ll reactivate the remaining rules in small sets and see if I can identify the ones that are causing this problem.