Require signed dependency packages

dotnet · Feb 27, 2021 · 424073d · 424073d
1 parent b7f6556
commit 424073d
Show file tree

Hide file tree

Showing 7 changed files with 22 additions and 8 deletions.
diff --git a/src/Cake.GitVersioning/Cake.GitVersioning.csproj b/src/Cake.GitVersioning/Cake.GitVersioning.csproj
@@ -32,7 +32,7 @@
   <ItemGroup>
     <PackageReference Include="Cake.Core" Version="0.33.0" PrivateAssets="all" />
     <PackageReference Include="DotNetMDDocs" Version="0.111.0" Condition=" '$(GenerateMarkdownApiDocs)' == 'true' " />
-    <PackageReference Include="Nerdbank.GitVersioning.LKG" Version="3.3.37.1" />
+    <PackageReference Include="Nerdbank.GitVersioning.LKG" Version="3.4.173-alpha" />
   </ItemGroup>
 
   <ItemGroup>

diff --git a/src/NerdBank.GitVersioning.Benchmarks/Nerdbank.GitVersioning.Benchmarks.csproj b/src/NerdBank.GitVersioning.Benchmarks/Nerdbank.GitVersioning.Benchmarks.csproj
@@ -12,7 +12,7 @@
   <ItemGroup>
     <PackageReference Include="BenchmarkDotNet" Version="0.12.1" />
     <PackageReference Include="BenchmarkDotNet.Diagnostics.Windows" Version="0.12.0" />
-    <PackageReference Include="Nerdbank.GitVersioning.LKG" Version="3.3.37.1" />
+    <PackageReference Include="Nerdbank.GitVersioning.LKG" Version="3.4.173-alpha" />
   </ItemGroup>
 
   <ItemGroup>

diff --git a/src/NerdBank.GitVersioning.Tests/NerdBank.GitVersioning.Tests.csproj b/src/NerdBank.GitVersioning.Tests/NerdBank.GitVersioning.Tests.csproj
@@ -43,7 +43,7 @@
     <PackageReference Include="xunit" Version="2.4.1" />
     <PackageReference Include="coverlet.collector" Version="1.3.0" />
     <PackageReference Include="Microsoft.CodeAnalysis.CSharp" Version="2.10.0" />
-    <PackageReference Include="Nerdbank.GitVersioning.LKG" Version="3.3.37.1" />
+    <PackageReference Include="Nerdbank.GitVersioning.LKG" Version="3.4.173-alpha" />
     <PackageReference Include="xunit.runner.visualstudio" Version="2.4.1">
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers</IncludeAssets>

diff --git a/src/NerdBank.GitVersioning/NerdBank.GitVersioning.csproj b/src/NerdBank.GitVersioning/NerdBank.GitVersioning.csproj
@@ -15,7 +15,7 @@
     <PackageReference Include="Newtonsoft.Json" Version="9.0.1" />
     <PackageReference Include="Nullable" Version="1.3.0" PrivateAssets="all" />
     <PackageReference Include="Validation" Version="2.5.5-beta" />
-    <PackageReference Include="Nerdbank.GitVersioning.LKG" Version="3.3.37.1" />
+    <PackageReference Include="Nerdbank.GitVersioning.LKG" Version="3.4.173-alpha" />
     <PackageReference Include="System.Text.Json" Version="4.7.2" />
     <PackageReference Include="PInvoke.Kernel32" Version="0.7.104" />
   </ItemGroup>

diff --git a/src/Nerdbank.GitVersioning.Tasks/Nerdbank.GitVersioning.Tasks.csproj b/src/Nerdbank.GitVersioning.Tasks/Nerdbank.GitVersioning.Tasks.csproj
@@ -75,7 +75,7 @@
   </ItemDefinitionGroup>
 
   <ItemGroup>
-    <PackageReference Include="Nerdbank.GitVersioning.LKG" Version="3.3.37.1" />
+    <PackageReference Include="Nerdbank.GitVersioning.LKG" Version="3.4.173-alpha" />
   </ItemGroup>
   <ItemGroup>
     <ProjectReference Include="..\NerdBank.GitVersioning\NerdBank.GitVersioning.csproj" />

diff --git a/src/nbgv/nbgv.csproj b/src/nbgv/nbgv.csproj
@@ -13,7 +13,7 @@
     <PackageReference Include="NuGet.PackageManagement" Version="4.9.3" NoWarn="NU1701" />
     <PackageReference Include="NuGet.Resolver" Version="4.9.3" />
     <PackageReference Include="System.CommandLine" Version="0.1.0-preview2-180503-2" />
-    <PackageReference Include="Nerdbank.GitVersioning.LKG" Version="3.3.37.1" PrivateAssets="all" />
+    <PackageReference Include="Nerdbank.GitVersioning.LKG" Version="3.4.173-alpha" PrivateAssets="all" />
     <PackageReference Include="System.Diagnostics.Tools" Version="4.3.0" />
     <PackageReference Include="Microsoft.Build" Version="15.9.20" />
   </ItemGroup>

diff --git a/src/nuget.config b/src/nuget.config
@@ -2,10 +2,24 @@
 <configuration>
   <config>
     <add key="repositorypath" value="packages" />
+    <add key="signatureValidationMode" value="require" />
   </config>
   <packageSources>
     <clear />
-    <add key="api.nuget.org" value="https://api.nuget.org/v3/index.json" protocolVersion="3" />
-    <add key="Consumption" value="https://pkgs.dev.azure.com/andrewarnott/OSS/_packaging/Consumption/nuget/v3/index.json" protocolVersion="3" />
+    <add key="api.nuget.org" value="https://api.nuget.org/v3/index.json" />
+    <add key="Consumption" value="https://pkgs.dev.azure.com/andrewarnott/OSS/_packaging/Consumption/nuget/v3/index.json" />
   </packageSources>
+  <trustedSigners>
+    <repository name="nuget" serviceIndex="https://api.nuget.org/v3/index.json">
+      <owners>Microsoft;aarnott;xunit;kzu;castleproject;patrickb8man;jamesnk;ethomson;AndreyAkinshin;MarcoRossignoli;cake-build;ericnewton76;0xd4d;manuel.roemer</owners>
+      <certificate fingerprint="0e5f38f57dc1bcc806d8494f4f90fbcedd988b46760709cbeec6f4219aa6157d" hashAlgorithm="SHA256" allowUntrustedRoot="false" />
+    </repository>
+    <author name="Nerdbank">
+      <certificate fingerprint="1f891e64936d15de5fae22d910cd39f3e9860213c92f20cf9638a245b1249d2b" hashAlgorithm="SHA256" allowUntrustedRoot="false" />
+    </author>
+    <author name="Microsoft">
+      <certificate fingerprint="aa12da22a49bce7d5c1ae64cc1f3d892f150da76140f210abd2cbffca2c18a27" hashAlgorithm="SHA256" allowUntrustedRoot="false" />
+      <certificate fingerprint="3f9001ea83c560d712c24cf213c3d312cb3bff51ee89435d3430bd06b5d0eece" hashAlgorithm="SHA256" allowUntrustedRoot="false" />
+    </author>
+  </trustedSigners>
 </configuration>