Skip to content

Use of public package feeds instead of CFS #1539

@mthalman

Description

@mthalman

The build for this repo is connecting to public package feeds instead of using central feed services (CFS). See https://aka.ms/1es/netiso/CFS for instruction on how to resolve. This is showing up in S360.

The domains that are being reported are the following:

  • registry.npmjs.org
  • pypi.org,files.pythonhosted.org
  • api.nuget.org
  • www.nuget.org
  • globalcdn.nuget.org

This should be at least partially mitigated by #1534 but that's focused only on Windows and Python.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions