https://blogs.sans.org/appsecstreetfighter/2016/10/21/continuous-integration-live-static-analysis-with-roslyn/