Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BuildCheck] Add BuildCheck run notifications to msbuild output #10135

Open
rokonec opened this issue May 15, 2024 · 0 comments
Open

[BuildCheck] Add BuildCheck run notifications to msbuild output #10135

rokonec opened this issue May 15, 2024 · 0 comments

Comments

@rokonec
Copy link
Contributor

rokonec commented May 15, 2024

Add BuildCheck run notifications to msbuild output, even if no checks failed.
Include package name in output so it can be tracked in case of malicious package.

This is recommendation from our security leaders. This shall increase discoverability and awareness what BuildChecks packages have had run during build, so user can easily detect abnormal or unexpected behavior.

@baronfel We have to design how to align this request with terminal logger minimal verbosity model. There were reasoning that since BuildCheck from CLI will be opt-in (mostly by CLI argument) and from practical point of view rare, we can afford to include this in summary - provided some buildcheck have had actually run.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants