We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Our Azure DevOps CI Pipeline current checks for security vulnerabilities in our dependencies:
Maui/azure-pipelines.yml
Lines 103 to 109 in 38ec66f
This step is currently reporting 3 vulnerable packages, however, the Check Dependencies step continues to pass (green): https://dev.azure.com/dotnet/CommunityToolkit/_build/results?buildId=74857&view=logs&j=792604ca-8f43-5a41-d895-10758edbd758&t=9cdee477-4d1a-5acd-94fa-d5e164beb4af&l=18
Check Dependencies
N/A
The Check Dependencies step should fail when it detects any vulnerable dependency
The Check Dependencies step passes despite detecting any vulnerable dependency
The text was updated successfully, but these errors were encountered:
There is an open issue for it: NuGet/Home#11315
Sorry, something went wrong.
[Bug] CI Pipeline Does Not Fail when Vulnerable Dependencies Found #493
a633bc0
44cf351
42f1fa3
[Bug] CI Pipeline Does Not Fail when Vulnerable Dependencies Found #493…
5ade8c2
… (#497)
VladislavAntonyuk
Successfully merging a pull request may close this issue.
Description
Our Azure DevOps CI Pipeline current checks for security vulnerabilities in our dependencies:
Maui/azure-pipelines.yml
Lines 103 to 109 in 38ec66f
This step is currently reporting 3 vulnerable packages, however, the
Check Dependencies
step continues to pass (green):https://dev.azure.com/dotnet/CommunityToolkit/_build/results?buildId=74857&view=logs&j=792604ca-8f43-5a41-d895-10758edbd758&t=9cdee477-4d1a-5acd-94fa-d5e164beb4af&l=18
Stack Trace
N/A
Link to Reproduction Sample
N/A
Expected Behavior
The
Check Dependencies
step should fail when it detects any vulnerable dependencyActual Behavior
The
Check Dependencies
step passes despite detecting any vulnerable dependencyThe text was updated successfully, but these errors were encountered: