Merge pull request #62 from Nexus-Mods/add-cve-ignore

add-cve-ignore
Nexus-Mods · Nov 12, 2024 · 0eb5535 · 0eb5535
2 parents 786075a + 45a4767
commit 0eb5535
Show file tree

Hide file tree

Showing 8 changed files with 16 additions and 3 deletions.
diff --git a/CVE.Ignore.props b/CVE.Ignore.props
@@ -0,0 +1,9 @@
+<Project>
+    <ItemGroup>
+        <!-- Suppress advisories that are not relevant to this project. Be sure to include a reason for each suppression. -->
+        <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-7jgj-8wvc-jh57"  Reason="Only affects .NET Core platforms, not .NET 8+, and this project targets .NET 8+"/>
+        <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-8g4q-xg66-9fp4" Reason="Possible source of DoS, but this is a test project and does not accept input from untrusted sources."/>
+        <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-cmhx-cq75-c4mj" Reason="Possible source of DoS, but this is a test project and does not accept input from untrusted sources."/>
+        <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-hh2w-p6rv-4g7w" Reason="Possible source of DoS, but this is a test project and does not accept input from untrusted sources."/>
+    </ItemGroup>
+</Project>
diff --git a/Directory.Packages.props b/Directory.Packages.props
@@ -3,7 +3,7 @@
     <PackageVersion Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="8.0.2" />
     <PackageVersion Include="Reloaded.Memory" Version="9.4.2" />
     <PackageVersion Include="Reloaded.Memory.Extensions" Version="9.4.2" />
-    <PackageVersion Include="TransparentValueObjects" Version="1.0.1" />
+    <PackageVersion Include="TransparentValueObjects" Version="1.0.2" />
     <PackageVersion Include="BenchmarkDotNet" Version="0.14.0" />
     <PackageVersion Include="NexusMods.Archives.Nx" Version="0.6.1" />
     <PackageVersion Include="JetBrains.Annotations" Version="2024.3.0" />

diff --git a/src/NexusMods.Paths.TestingHelpers/NexusMods.Paths.TestingHelpers.csproj b/src/NexusMods.Paths.TestingHelpers/NexusMods.Paths.TestingHelpers.csproj
@@ -1,4 +1,5 @@
 <Project Sdk="Microsoft.NET.Sdk">
+    <Import Project="$([MSBuild]::GetPathOfFileAbove('CVE.Ignore.props', '$(MSBuildThisFileDirectory)../'))" />
     <Import Project="$([MSBuild]::GetPathOfFileAbove('NuGet.Build.props', '$(MSBuildThisFileDirectory)../'))" />
 
     <ItemGroup>

diff --git a/src/NexusMods.Paths/NexusMods.Paths.csproj b/src/NexusMods.Paths/NexusMods.Paths.csproj
@@ -11,6 +11,7 @@
         <PackageReference Include="TransparentValueObjects" PrivateAssets="all" OutputItemType="Analyzer" ReferenceOutputAssembly="false" />
     </ItemGroup>
 
+
     <ItemGroup>
         <InternalsVisibleTo Include="NexusMods.Paths.Benchmarks" />
     </ItemGroup>

diff --git a/src/NexusMods.Paths/Utilities/Enums/ExtensionCategory.cs b/src/NexusMods.Paths/Utilities/Enums/ExtensionCategory.cs
@@ -61,7 +61,7 @@ public enum ExtensionCategory : byte
     Library = 9,
 
     /// <summary>
-    /// Represents 2D & 3D model and related file formats.
+    /// Represents 2D and 3D model and related file formats.
     /// </summary>
     Model = 10,
 

diff --git a/src/NexusMods.Paths/Utilities/KnownExtensions.cs b/src/NexusMods.Paths/Utilities/KnownExtensions.cs
@@ -228,7 +228,7 @@ public static class KnownExtensions
     /// <summary>.dylib - Library, Dynamic Library. macOS.</summary>
     public static readonly Extension Dylib = new(".dylib");
 
-    /// <summary>.so - Library, Shared Object. Linux & Unix-like.</summary>
+    /// <summary>.so - Library, Shared Object. Linux and Unix-like.</summary>
     public static readonly Extension So = new(".so");
 
     #endregion

diff --git a/...Extensions/NexusMods.Paths.Extensions.Nx.Tests/NexusMods.Paths.Extensions.Nx.Tests.csproj b/...Extensions/NexusMods.Paths.Extensions.Nx.Tests/NexusMods.Paths.Extensions.Nx.Tests.csproj
@@ -1,4 +1,5 @@
 <Project Sdk="Microsoft.NET.Sdk">
+    <Import Project="$([MSBuild]::GetPathOfFileAbove('CVE.Ignore.props', '$(MSBuildThisFileDirectory)../../'))" />
 
     <PropertyGroup>
         <EnableXunitDependencyInjectionDefaultTestFrameworkAttribute>false</EnableXunitDependencyInjectionDefaultTestFrameworkAttribute>

diff --git a/tests/NexusMods.Paths.Tests/NexusMods.Paths.Tests.csproj b/tests/NexusMods.Paths.Tests/NexusMods.Paths.Tests.csproj
@@ -1,4 +1,5 @@
 <Project Sdk="Microsoft.NET.Sdk">
+    <Import Project="$([MSBuild]::GetPathOfFileAbove('CVE.Ignore.props', '$(MSBuildThisFileDirectory)../'))" />
     <PropertyGroup>
         <EnableXunitDependencyInjectionDefaultTestFrameworkAttribute>false</EnableXunitDependencyInjectionDefaultTestFrameworkAttribute>
         <AllowUnsafeBlocks>true</AllowUnsafeBlocks>