Enable NuGetAudit

dotnet · Sep 10, 2024 · bd5b67b · bd5b67b
1 parent 65a4588
commit bd5b67b
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/Directory.Build.props b/Directory.Build.props
@@ -49,6 +49,11 @@
   <PropertyGroup Condition="'$(DeveloperBuild)' == 'true'">
     <WarningsNotAsErrors>$(WarningsNotAsErrors);CS1591;SA1636</WarningsNotAsErrors>
   </PropertyGroup>
+
+  <PropertyGroup>
+    <!-- Don't upgrade NuGetAudit warnings to errors before the initial wave is fixed. -->
+    <WarningsNotAsErrors>$(WarningsNotAsErrors);NU1901;NU1902;NU1903;NU1904</WarningsNotAsErrors>
+  </PropertyGroup>
 
   <!-- HACK: Work around #15093 -->
   <PropertyGroup>

diff --git a/NuGet.config b/NuGet.config
@@ -16,6 +16,10 @@
     <!-- Used for the Rich Navigation indexing task -->
     <add key="richnav" value="https://pkgs.dev.azure.com/azure-public/vside/_packaging/vs-buildservices/nuget/v3/index.json" />
   </packageSources>
+  <auditSources>
+    <clear />
+    <add key="nuget.org" value="https://api.nuget.org/v3/index.json" />
+  </auditSources>
   <disabledPackageSources>
     <clear />
     <!--Begin: Package sources managed by Dependency Flow automation. Do not edit the sources below.-->