search

Altinn / app-lib-dotnet

Libraries used in Altinn Apps
BSD 3-Clause "New" or "Revised" License
8 stars 11 forks source link

Add signing for Nuget packages #521

Open altinnadmin opened 3 years ago

altinnadmin commented 3 years ago

Currently, we're not signing our nuget packages.

Signed packages allows for content integrity verification checks which provides protection against content tampering. The package signature also serves as the single source of truth about the actual origin of the package and bolsters package authenticity for the consumer.

https://docs.microsoft.com/nuget/create-packages/sign-a-package

nkylstad commented 8 months ago

Transferring to app-lib repo, fyi @RonnyB71