Michael Simons

Silent failure when config file contains invalid json

1

Create a malformed json config file and run the GH action when there are invalid links. When this happens the action will pass with no errors. I discovered this while...

Document policy on when support is added for new OS versions

1

The [Supported Platforms documentation](https://github.com/dotnet/dotnet-docker/blob/main/documentation/supported-platforms.md) describes what Linux distros and Windows versions are supported as well as what new versions will have support added for. The document is not specific however...

Update source-build team references

3

The @dotnet/source-build-internal team is being deprecated. All references to it were updated. Included the renaming of SourceBuild.props to the new naming convention, DotNetBuild.props. Related to dotnet/source-build#4645 Repo admins, please grant...

Repo's currently cannot take a dependency on both docker-tools and arcade. There is value in "docker" repos using arcade as it provides common infra around acquiring .NET, bin placing artifacts...

Vulnerabilities in the azurelinux-3.0-net8.0-webassembly-amd64 image

6

- https://github.com/dotnet/dotnet-buildtools-prereqs-docker-internal/issues/253 - https://github.com/dotnet/dotnet-buildtools-prereqs-docker-internal/issues/252 - https://github.com/dotnet/dotnet-buildtools-prereqs-docker-internal/issues/251 - https://github.com/dotnet/dotnet-buildtools-prereqs-docker-internal/issues/250 - https://github.com/dotnet/dotnet-buildtools-prereqs-docker-internal/issues/249 - https://github.com/dotnet/dotnet-buildtools-prereqs-docker-internal/issues/248 - https://github.com/dotnet/dotnet-buildtools-prereqs-docker-internal/issues/247 - https://github.com/dotnet/dotnet-buildtools-prereqs-docker-internal/issues/246 - https://github.com/dotnet/dotnet-buildtools-prereqs-docker-internal/issues/245 - https://github.com/dotnet/dotnet-buildtools-prereqs-docker-internal/issues/244 - https://github.com/dotnet/dotnet-buildtools-prereqs-docker-internal/issues/243 - https://github.com/dotnet/dotnet-buildtools-prereqs-docker-internal/issues/242 - https://github.com/dotnet/dotnet-buildtools-prereqs-docker-internal/issues/241 - https://github.com/dotnet/dotnet-buildtools-prereqs-docker-internal/issues/240 - https://github.com/dotnet/dotnet-buildtools-prereqs-docker-internal/issues/92...

Now that [every Dockerfile is utilizing an installer stage](https://github.com/dotnet/dotnet-docker/pull/6245), consider changing how the .NET version numbers are being handled. Current Pattern (.NET version is being specified in multiple places): ```Dockerfile...

Remove bundled FSharp.NET.Sdk

6

The FSharp.NET.Sdk was the original F# was added to the SDK prior to .NET 2.0. F# is now included by default in the .NET SDK. This SDK to prevent breaking...

[CodeQL] Encryption using ECB, OFB or CFB

2

Applies to src/Microsoft.IdentityModel.Tokens/Encryption/SymmetricKeyWrapProvider.cs Violation - Use of one of the following unsafe encryption modes that is not approved: [System.Security.Cryptography.CipherMode.ECB](https://docs.microsoft.com/en-us/dotnet/api/system.security.cryptography.ciphermode#System_Security_Cryptography_CipherMode_ECB) [System.Security.Cryptography.CipherMode.OFB](https://docs.microsoft.com/en-us/dotnet/api/system.security.cryptography.ciphermode#System_Security_Cryptography_CipherMode_OFB) [System.Security.Cryptography.CipherMode.CFB](https://docs.microsoft.com/en-us/dotnet/api/system.security.cryptography.ciphermode#System_Security_Cryptography_CipherMode_CFB) These modes are vulnerable to attacks and may cause...