NuGet feeds are not compliant with NuGet feed security requirements

microsoft / krabsetw

KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.

Other

581 stars 149 forks source link

NuGet feeds are not compliant with NuGet feed security requirements #233

Closed matt-vanderkolk closed 3 months ago

matt-vanderkolk commented 3 months ago

We're trying to ingest this feed into a Component Governance controlled pipeline and we are hitting errors because there are 2 NuGet feeds which point directly to nuget.org. Our partner's requirements state this must be directed through an ADO artifact feed. Is this something you can set up? Please reach out to me directly for more context.

swannman commented 3 months ago

Moved this to an internal discussion and shared steps for creating an artifact feed that consumes from upstream sources.