New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Sign Choco nuget packages #1884

Open

pavel-mikula-sonarsource opened this issue Feb 27, 2024 · 0 comments

Labels

Contributor

pavel-mikula-sonarsource commented Feb 27, 2024

Our build produces 3 packages:

dotnet-sonarscanner..nupkg
sonarscanner-net..nupkg
sonarscanner-net-framework..nupkg

The 1st one is the actual scanner and the nuget package is signed.

The second and third are instruction packages for choco release and are not signed.

We should:

Sign them
Verify if we can instruct choco to verify the signature

pavel-mikula-sonarsource added the Area: Infrastructure label

costin-zaharia-sonarsource added Type: Tooling and removed Area: Infrastructure labels

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment