Erick Yondon
Erick Yondon
I assume signing happens on the CI pipeline, but many CI pipelines log CLI arguments and output for investigating issues. As a result, secrets may get logged into some storage...
### Impact Other ### Describe the bug In the selection below, it would consider any of `net5.0, net6.0, net7.0, net8.0`, and `netcoreapp2.0` for filtering. `filter =any(net5.0, net6.0, net7.0, net8.0) &&...
### Impact I'm unable to use NuGet.org ### Describe the bug Go to the admin menu of the development environment and click on `Clear content cache`. Observe the network calls...
When code inlining happens then Assembly.GetExecutingAssembly().Location may point to wrong location. So we need to replace with typeof(T).Assembly.Location for reliability. Here T is just current class name or other class...
The latest version of Visual Studio 2022 allows repo-specific Copilot instructions to better guide AI (LLM) generated code to be more compatible with existing code and follow the same coding...
Addressing Component Government requires promoting transitive dependency to direct to address it, instead we could enable `CentralPackageTransitivePinningEnabled`
Related to: https://github.com/NuGet/Engineering/issues/6154 1. We have introduced a new `CatalogValidationContext`, which inherits from the existing `ValidationContext`. The main difference is the addition of the `batchId` column in the ValidatorStatuses table....