Skip to content

fix(security): Add 3 packages.lock.json files for dependency locking - #299

Merged
David De Sloovere (DavidDeSloovere) merged 1 commit into
mainfrom
aikido/fix-dotnet-114260274-ewrj
Sep 14, 2026
Merged

David De Sloovere (DavidDeSloovere) merged 1 commit into
mainfrom
aikido/fix-dotnet-114260274-ewrj

Conversation

@aikido-autofix

Copy link
Copy Markdown
Contributor

.NET Lockfile Creation

This PR adds packages.lock.json files to ensure reproducible builds and secure dependency management.

Files Added:

  • sample/SendMailTestApp/packages.lock.json
  • src/FluentEmail.Graph/packages.lock.json
  • tests/FluentEmail.Graph.Tests/packages.lock.json

Benefits:

  • Reproducible builds: Locked dependency versions ensure consistent builds across environments
  • Security: Prevents supply chain attacks by pinning specific dependency versions
  • Performance: Faster builds in CI/CD pipelines
  • Deterministic child dependency scanning: Scanning for child dependencies becomes deterministic, reducing false positives in dependency analysis

The lockfiles were generated using dotnet restore command.

@aikido-autofix aikido-autofix Bot added the Aikido Label created by Aikido AutoFix label Sep 14, 2026
@DavidDeSloovere
David De Sloovere (DavidDeSloovere) merged commit dafb028 into main Sep 14, 2026
2 checks passed
@DavidDeSloovere
David De Sloovere (DavidDeSloovere) deleted the aikido/fix-dotnet-114260274-ewrj branch September 14, 2026 14:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Aikido Label created by Aikido AutoFix

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant