dennisdoomen / packageguard / 41290752215

82%

Build Type

push

github

Committed by web-flow

Commit Message

Support private NuGet feeds that use package source mapping (#319)

* Skip a NuGet feed that fails instead of aborting the analysis

A single feed that rejected the credentials or could not be reached
stopped the whole analysis with an unhandled 401 or connection error,
even when another feed could provide the package.

Such a feed is now treated as not having the package. PackageGuard logs
a warning and moves on to the next feed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* Respect NuGet package source mapping when looking up package metadata

PackageGuard asked every configured feed for every package, ignoring the
packageSourceMapping section of nuget.config. A private feed that only
serves a few packages was therefore also asked for public packages such
as Azure.Core. GitHub Packages answers those requests with 401, which
broke the analysis even though restore worked fine.

PackageGuard now only asks the feeds that the mapping allows for a
package, in the configured order, just like restore. Without a mapping,
all feeds are still asked.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Coverage Stats

2720 of 3629 branches covered (74.95%)

Branch coverage included in aggregate %.

33 of 33 new or added lines in 1 file covered. (100.0%)

4 existing lines in 1 file now uncovered.

8377 of 9968 relevant lines covered (84.04%)

2284.01 hits per line