search

digitalcoyote / NuGetDefense

An MSBuildTask that checks for known vulnerabilities. Inspired by OWASP SafeNuGet.
MIT License
96 stars 19 forks source link

NuGet 6.8 Vulenrability Info #165

Closed digitalcoyote closed 4 months ago

digitalcoyote commented 10 months ago

What is the Feature? Please describe. The NuGet team has expressed that 6.8 includes all the vulnerability features needed and as long as NuGetDefense can parse them out, there is no reason not to use it.

Use Case Giving the ability to break/warn on build based on the NuGetCLI's built in scanning

Additional context Should probably run by default and clearly state where the vulnerabilities were detected in case of false positives.

digitalcoyote commented 9 months ago

Marking this as up for grabs. I'll be focusing on a few other improvements before looking at this but anyone else is welcome to work it.