Skip to content

[Aikido] Add 1 packages.lock.json file for dependency locking - #6

Open
aikido-autofix-us[bot] wants to merge 1 commit into
mainfrom
fix/aikido-security-dotnet-1067682-vw5b
Open

[Aikido] Add 1 packages.lock.json file for dependency locking#6
aikido-autofix-us[bot] wants to merge 1 commit into
mainfrom
fix/aikido-security-dotnet-1067682-vw5b

Conversation

@aikido-autofix-us

Copy link
Copy Markdown
Contributor

.NET Lockfile Creation

This PR adds packages.lock.json files to ensure reproducible builds and secure dependency management.

Files Added:

  • services/windows-dropbox-service/packages.lock.json

Benefits:

  • Reproducible builds: Locked dependency versions ensure consistent builds across environments
  • Security: Prevents supply chain attacks by pinning specific dependency versions
  • Performance: Faster builds in CI/CD pipelines
  • Deterministic child dependency scanning: Scanning for child dependencies becomes deterministic, reducing false positives in dependency analysis

The lockfiles were generated using dotnet restore command.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants