Skip to content
This repository has been archived by the owner on Dec 18, 2017. It is now read-only.

Build dependencies should be configurable not fall back to NuGet when missing. #619

Closed
blowdart opened this issue Sep 10, 2014 · 1 comment
Assignees
Milestone

Comments

@blowdart
Copy link
Member

Currently the build system will check nuget feeds for missing dependencies. This is undesirable from a security perspective.

The build system needs a way to be told "This must come from the local 'GAC', a local project or this must come from this nuget feed only"

@blowdart blowdart added the bug label Sep 10, 2014
@Eilon Eilon changed the title Build dependancies should be configurable not fallback to nuget when missing. Build dependencies should be configurable not fall back to NuGet when missing. Sep 11, 2014
@davidfowl
Copy link
Member

Related to #438

@davidfowl davidfowl added this to the 1.0.0-beta1 milestone Sep 25, 2014
davidfowl added a commit that referenced this issue Sep 25, 2014
- The frameworkAssemblies section is specific to a target framework
- Refactored BuildContext to call into the ProjectReferenceDependencyProvider.
This means that only a single place actually uses the project class directly
(which is nice).
- GetLibraryDescription now takes a Library instead of name and version
(we may need to revisit this and create a different poco). When @lodejard finishes
dependency types we'll see how this ends up
- Preserve the backwards compatibility of declaring frameworkAssemblies in
dependencies temporarily
- Added tests for parsing frameworkAssemblies

#640
#619
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants