http://software-security.sans.org/blog/2016/10/21/continuous-integration-live-static-analysis-with-roslyn