dotnet / msbuild

The Microsoft Build Engine (MSBuild) is the build platform for .NET and Visual Studio.
https://docs.microsoft.com/visualstudio/msbuild/msbuild
MIT License
5.15k stars 1.34k forks source link

[BuildCheck] Add BuildCheck run notifications to msbuild output #10135

Open rokonec opened 2 weeks ago

rokonec commented 2 weeks ago

Add BuildCheck run notifications to msbuild output, even if no checks failed. Include package name in output so it can be tracked in case of malicious package.

This is recommendation from our security leaders. This shall increase discoverability and awareness what BuildChecks packages have had run during build, so user can easily detect abnormal or unexpected behavior.

@baronfel We have to design how to align this request with terminal logger minimal verbosity model. There were reasoning that since BuildCheck from CLI will be opt-in (mostly by CLI argument) and from practical point of view rare, we can afford to include this in summary - provided some buildcheck have had actually run.