Skip to content

[release/8.0.4xx] Fix internal feed auth in unofficial CI pipeline#54363

Merged
marcpopMSFT merged 1 commit into
release/8.0.4xxfrom
backport/pr-54362-to-release/8.0.4xx
May 19, 2026
Merged

[release/8.0.4xx] Fix internal feed auth in unofficial CI pipeline#54363
marcpopMSFT merged 1 commit into
release/8.0.4xxfrom
backport/pr-54362-to-release/8.0.4xx

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

Backport of #54362 to release/8.0.4xx

/cc @marcpopMSFT

…udit in tests

The unofficial CI pipeline (1472) does not have the AzureDevOps-Artifact-Feeds-Pats
variable group linked, causing $(dn-bot-dnceng-artifact-feeds-rw) to resolve to a
literal string instead of a PAT. This results in 401 Unauthorized errors when Helix
test machines try to access internal NuGet feeds.

Use $(System.AccessToken) instead, which is always available in any AzDO pipeline.
The build service identity already has read access to the internal feeds.

Additionally, disable NuGet audit (NuGetAudit=false) in two tests that intentionally
reference old vulnerable packages (System.Net.Http 4.3.0, System.Text.RegularExpressions
4.3.0, Microsoft.NETCore.App 2.1.0) for conflict resolution testing. The NU1903
vulnerability warnings were causing assertion failures.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@github-actions github-actions Bot added the backport PR that has been backported to a servicing branch label May 18, 2026
@marcpopMSFT marcpopMSFT enabled auto-merge May 18, 2026 22:36
@marcpopMSFT marcpopMSFT merged commit 756e17a into release/8.0.4xx May 19, 2026
17 checks passed
@marcpopMSFT marcpopMSFT deleted the backport/pr-54362-to-release/8.0.4xx branch May 19, 2026 16:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Area-Infrastructure backport PR that has been backported to a servicing branch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant