Configure project to use private artifactory nuget source and package locks #20
Conversation
vnaskos-sonar
force-pushed
the
vn/use-artifactory
branch
from
bb210a7 to
c5fc43b
Compare
vnaskos-sonar
force-pushed
the
vn/use-artifactory
branch
6 times, most recently
from
6d03381 to
5b4f2ab
Compare
vnaskos-sonar
changed the title
NuGet.Config
Outdated
|
|
||
| <config> | ||
| <clear /> | ||
| <add key="signatureValidationMode" value="accept" /> |
There was a problem hiding this comment.
Shouldn't this be set to require?
There was a problem hiding this comment.
Some of the Microsoft dotnet packages are preview and not signed, so require would fail. I've used accept instead so that we check the signed packages and not fail for the unsigned.
There was a problem hiding this comment.
Can we replace those packages with non-preview versions?
There was a problem hiding this comment.
It would be nice to have them documented at least
There was a problem hiding this comment.
Currently the project uses a preview version of the dotnet 6 to build, with the following comment
.WithProperty("RuntimeFrameworkVersion", "6.0.0-preview.7.21317.1") // Set the minimum runtime to a .NET 6 prerelease so that prerelease SDKs will be considered during rollForward.
I could change it to eg. 6.0.36, so it doesn't use preview packages and everything is signed. But I don't know the implications of this change.
vnaskos-sonar
force-pushed
the
vn/use-artifactory
branch
2 times, most recently
from
2c0d659 to
51c8a5c
Compare
vnaskos-sonar
force-pushed
the
vn/use-artifactory
branch
from
51c8a5c to
d5ed718
Compare
vnaskos-sonar
force-pushed
the
vn/use-artifactory
branch
from
d5ed718 to
67f5b45
Compare
|
vnaskos-sonar
force-pushed
the
vn/use-artifactory
branch
from
ce54c6d to
5376551
Compare
2 participants
No description provided.