[jira] [Commented] (IGNITE-22751) .NET: Enable NuGet audit

["Igor Sapego (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/IGNITE-22751?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17869304#comment-17869304 ] 

Igor Sapego commented on IGNITE-22751:
--------------------------------------

Looks good to me.

> .NET: Enable NuGet audit
> ------------------------
>
>                 Key: IGNITE-22751
>                 URL: https://issues.apache.org/jira/browse/IGNITE-22751
>             Project: Ignite
>          Issue Type: Improvement
>          Components: platforms, thin client
>    Affects Versions: 3.0.0-beta1
>            Reporter: Pavel Tupitsyn
>            Assignee: Pavel Tupitsyn
>            Priority: Major
>              Labels: .NET, ignite-3
>             Fix For: 3.0.0-beta2
>
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> Add the following to  the *Directory.Build.props* file to enable security audit during package restore:
> {code}
>         <NuGetAudit>true</NuGetAudit>
>         <NuGetAuditMode>all</NuGetAuditMode>
>         <NuGetAuditLevel>low</NuGetAuditLevel>
> {code}
> This will fail the build if vulnerable dependencies are present (direct or transitive).
> https://learn.microsoft.com/en-us/nuget/concepts/auditing-packages



--
This message was sent by Atlassian Jira
(v8.20.10#820010)