Skip to content

Commit dafb028

Browse files
fix(security): Add 3 packages.lock.json files for dependency locking (#299)
## .NET Lockfile Creation This PR adds packages.lock.json files to ensure reproducible builds and secure dependency management. ### Files Added: - `sample/SendMailTestApp/packages.lock.json` - `src/FluentEmail.Graph/packages.lock.json` - `tests/FluentEmail.Graph.Tests/packages.lock.json` ### Benefits: - **Reproducible builds**: Locked dependency versions ensure consistent builds across environments - **Security**: Prevents supply chain attacks by pinning specific dependency versions - **Performance**: Faster builds in CI/CD pipelines - **Deterministic child dependency scanning**: Scanning for child dependencies becomes deterministic, reducing false positives in dependency analysis The lockfiles were generated using `dotnet restore` command. Co-authored-by: aikido-autofix[bot] <119856028+aikido-autofix[bot]@users.noreply.github.com>
1 parent 167cbef commit dafb028

6 files changed

Lines changed: 1540 additions & 0 deletions

File tree

‎sample/SendMailTestApp/SendMailTestApp.csproj‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,7 @@
77
<Nullable>enable</Nullable>
88
<UserSecretsId>4eba8463-a290-440f-b079-62d74334211a</UserSecretsId>
99
<LangVersion>latestmajor</LangVersion>
10+
<RestorePackagesWithLockFile>true</RestorePackagesWithLockFile>
1011
</PropertyGroup>
1112

1213
<ItemGroup>

0 commit comments

Comments
 (0)