New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable SHA tracking and enforcement for Packages.Config scenarios #7281

rrelyea opened this Issue Sep 7, 2018 · 1 comment


None yet
2 participants
Copy link

rrelyea commented Sep 7, 2018

We'd like to enable Packages.Config scenarios to track and enforce SHA.

For PackageReference users, project lock file will enable SHA enforcement.
We are exploring either:

  1. adding SHA as a new Attribute of the Package element in Packages.Config
  2. adding lock file to Packages.Config scenarios.


@rrelyea rrelyea added this to the 4.9 milestone Sep 7, 2018

@rrelyea rrelyea modified the milestones: 4.9, 5.0 Nov 20, 2018


This comment has been minimized.

Copy link

rrelyea commented Nov 20, 2018

May ship in 4.9.x, but lets track this as 5.0 for now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment