NuGet.Config

<?xml version="1.0" encoding="utf-8"?>
<configuration>
  <packageSources>
    <clear />
    <add key="Repox Artifactory (proxy)" value="https://repox.jfrog.io/artifactory/api/nuget/nuget" />
    <add key="Repox Artifactory (releases)" value="https://repox.jfrog.io/repox/api/nuget/sonarsource-nuget-releases" />
  </packageSources>
  <config>
    <clear />
    <add key="signatureValidationMode" value="require" />
  </config>
  <trustedSigners>
    <clear />
    <repository name="nuget.org" serviceIndex="https://api.nuget.org/v3/index.json">
      <!-- Subject Name: CN=NuGet.org Repository by Microsoft, valid from 10/04/2018 -->
      <certificate fingerprint="0E5F38F57DC1BCC806D8494F4F90FBCEDD988B46760709CBEEC6F4219AA6157D" hashAlgorithm="SHA256" allowUntrustedRoot="false" />
      <!-- Subject Name: CN=NuGet.org Repository by Microsoft, valid from 16/02/2021 -->
      <certificate fingerprint="5A2901D6ADA3D18260B9C6DFE2133C95D74B9EEF6AE0E5DC334C8454D1477DF4" hashAlgorithm="SHA256" allowUntrustedRoot="false" />
      <!-- sharwell = author of StyleCop.Analyzers -->
      <!-- test dependencies: -->
      <!-- meirb = Meir Blachman, author of FluentAssertions.Analyzers -->
      <!-- kzu = Daniel Cazzulino, author of Moq -->
      <!-- jonorossi = Jonathon Rossi, maintainer of Castle Project -->
      <!-- onovotny = Claire Novotny, author of Humanizer.Core -->
      <!-- SteveGilham = author of AltCover-->
      <!-- jamesnk = author of Newtonsoft.Json -->
      <owners>protobuf-packages;Microsoft;sharwell;meirb;kzu;dotnetfoundation;castleproject;jonorossi;onovotny;fluentassertions;SteveGilham;jamesnk</owners>
    </repository>
    <author name="SonarSource">
      <certificate fingerprint="FC4D3F3F815C1B56A656F1A5D9456AF04B469267D945786057175049B15A62A0" hashAlgorithm="SHA256" allowUntrustedRoot="false" />
    </author>
  </trustedSigners>
</configuration>