cs/unused-collection false positive?

[michael-hawker]

Hope this is the right place to file analyzer issues as well, didn't really see any info on recommendations for reporting issues anywhere.

We saw a "Container contents are never accessed" error on our report cs/unused-collection: https://github.com/CommunityToolkit/Windows/security/code-scanning/9

Flagging this code in our file:

private List<UIElement> _overflow = new List<UIElement>();

But it was used here in our ArrangeOverride method:

    /// <inheritdoc/>
    protected override Size ArrangeOverride(Size finalSize)
    {
        // Have grid to the bulk of our heavy lifting.
        var size = base.ArrangeOverride(finalSize);

        // Make sure all overflown elements have no size.
        foreach (var child in _overflow)
        {
            child.Arrange(default);
        }

Is this due to the foreach usage or because this is in a framework/platform method that is uncalled by our codebase directly but will be called by the XAML/UWP/WindowsAppSDK platform?

[aeisenberg]

Thanks for reporting. I'm moving this to github/codeql where the issue can be properly triaged.