cake-build / cake-build/cake

Implement package signature verification in Cake

Open
#3,178 0 comments 0 reactions 0 assignees View on GitHub
Feature
Dominant language
C#
Stars
4.2k
Forks
778
Avg merge
3h 37m
Merged PRs (30d)
21

Description

> From https://github.com/NuGet/NuGetGallery/issues/8381#issuecomment-782458432
>
> _[As of .NET 5/NuGet 5.8](https://docs.microsoft.com/en-us/nuget/release-notes/nuget-5.8#summary-whats-new-in-58), NuGet has cross-platform support for package signature verification. This can bolster the security of package consumption, protecting against tampering and even enforcing strict client trust polices_.
>

Contributor guide

Open the contributing guide

Research direction

Start by locating Cake’s NuGet package consumption path and any related tests; the issue names no files or entry points. Read the linked NuGet Gallery issue and NuGet 5.8 signature-verification notes to establish requirements. Done means Cake verifies package signatures cross-platform, with coverage for the supported trust policies.

Written by the indexing model from the issue text.

Assessment

Tech stack
csharp
Domain
security, tooling
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.