[meziantou]

Why

The fuzz run 39145766253 fuzzed a branch (e002ab92) based on a commit older than the fixes of #1672-#1690. It found those defects again and opened 18 "reproduces again" issues (#1713-#1730), none of which reproduces on main.

What

• report.ps1: for a finding whose latest issue is closed as completed, the script finds the commit that closed the issue (the merge commit of the closing pull request, or the closing commit, from the ClosedEvent.closer of the issue timeline) and checks with git merge-base --is-ancestor that the fuzzed commit contains it. When it does not, the finding is skipped as known. When the closing commit is unknown (issue closed manually, commit missing from the clone), the finding is still reported as a regression.
• -DryRun now looks up the existing issues when -Repository is set (still read-only), so a dry run shows which findings would be skipped.
• fuzz.yml: the report job checks out the full history (fetch-depth: 0), as merge-base needs both commits.
• README.md: describes the rule in "Weekly run" and the dry run options.

Validation

Dry run with fake findings that use the signatures of existing issues, with -CommitSha e002ab92 (the commit of the run above):

Fixed in #1682 by 4b31bc262796b9298ee8c87ca731aae4c5736983, which e002ab920c50168715721938bf7a2176c4429c1f does not contain: Finding 6f13ff0038fd6c8c
Known in #1723: Finding 7f8c3a697ab200c3

• [Fuzzing] MA0110 (UseRegexSourceGeneratorFixer) code fix introduces CS9248 #1645, fixed before the run commit, is still reported as a regression.
• [Fuzzing] MA0110 (UseRegexSourceGeneratorFixer) throws ArgumentNullException in UseRegexSourceGeneratorFixer.ConvertTopLevelStatementToSourceGenerator #1693, which has no closing commit, is still reported (same behavior as before).
• With -CommitSha set to main, [Fuzzing] MA0010 (MarkAttributesWithAttributeUsageAttributeFixer) throws InvalidCastException in MarkAttributesWithAttributeUsageAttributeFixer.Refactor #1682 is reported as a regression.
• With an unknown commit, nothing is skipped.