Fixed the security supply chain warnings for tools repo (Azure#3275)

MaryGao · May 5, 2022 · 90b92cd · 90b92cd
1 parent 0db221c
commit 90b92cd
Show file tree

Hide file tree

Showing 4 changed files with 3 additions and 5 deletions.
diff --git a/NuGet.Config b/NuGet.Config
@@ -3,7 +3,6 @@
   <packageSources>
     <clear />
     <add key="nuget.org" value="https://api.nuget.org/v3/index.json" />
-    <add key="dotnet-tools" value="https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-tools/nuget/v3/index.json" />
   </packageSources>
   <disabledPackageSources>
     <clear />

diff --git a/eng/pipelines/templates/variables/globals.yml b/eng/pipelines/templates/variables/globals.yml
@@ -2,6 +2,5 @@ variables:
   OfficialBuildId: $(Build.BuildNumber)
   skipComponentGovernanceDetection: true
   DotNetCoreVersion: '3.1.405'
-  NugetSecurityAnalysisWarningLevel: 'none'
   NotificationsCreatorVersion: '1.0.0-dev.20220414.1'
   CodeOwnersSubscriberVersion: '1.0.0-dev.20220302.2'
diff --git a/...lientSdk.Analyzers/Azure.ClientSdk.Analyzers.Tests/Azure.ClientSdk.Analyzers.Tests.csproj b/...lientSdk.Analyzers/Azure.ClientSdk.Analyzers.Tests/Azure.ClientSdk.Analyzers.Tests.csproj
@@ -11,8 +11,8 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.CodeAnalysis.CSharp.Analyzer.Testing.XUnit" Version="1.0.1-beta1.20374.2" />
-    <PackageReference Include="Microsoft.CodeAnalysis.CSharp.CodeRefactoring.Testing.XUnit" Version="1.0.1-beta1.20374.2" />
+    <PackageReference Include="Microsoft.CodeAnalysis.CSharp.Analyzer.Testing.XUnit" Version="1.1.1" />
+    <PackageReference Include="Microsoft.CodeAnalysis.CSharp.CodeRefactoring.Testing.XUnit" Version="1.1.1" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="16.5.0" />
     <PackageReference Include="System.Threading.Tasks.Extensions" Version="4.5.3" />
 

diff --git a/tools/keyvault-mock-attestation/Dockerfile b/tools/keyvault-mock-attestation/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:14-alpine
+FROM mcr.microsoft.com/cbl-mariner/base/nodejs:16
 
 WORKDIR /usr/src/app