-
Notifications
You must be signed in to change notification settings - Fork 498
Update audit docs for .net 10 #3476
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
Updates NuGet audit documentation to reflect .NET 10 changes, specifically the default behavior changes for NuGetAuditMode and new CLI commands for handling vulnerable packages.
- Adds entry for NuGet 7.0/.NET 10 with default audit mode changes and new CLI command
- Updates documentation date to reflect current changes
- Enhances vulnerability remediation guidance with new
dotnet package update --vulnerable
command
Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
PoliCheck Scan ReportThe following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 issues. Other issues are also a high priority. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans. ✅ No issues foundMore information about PoliCheckInformation: PoliCheck | Severity Guidance | Term |
Learn Build status updates of commit 2df951e: ✅ Validation status: passed
For more details, please refer to the build report. |
PoliCheck Scan ReportThe following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 issues. Other issues are also a high priority. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans. ✅ No issues foundMore information about PoliCheckInformation: PoliCheck | Severity Guidance | Term |
Learn Build status updates of commit 85dfce6: ✅ Validation status: passed
For more details, please refer to the build report. |
Fixes: NuGet/Home#14564
The docs were already updated to say that NuGetAuditMode has changed defaults when projects target .net 10 or higher. This PR updates the table giving an overview of features per version and adds a mention of
dotnet package update --vulnerable
.