C# Add support for authenticated nuget feeds
- Dominant language
- CodeQL
- Stars
- 10.1k
- Forks
- 2.1k
- Avg merge
- 2d 15h
- Merged PRs (30d)
- 141
Description
**Description of the issue**
This is using advanced mode with `build-mode: none` to take advantage of the "no build" csharp analyzers.
When using authenticated nuget feeds with `build-mode: none`, CodeQL will try and restore the packages, however there are multiple errors within the logs indicating that the feed failed due to 401 errors:
```
[2026-03-20 02:10:31] [build-stdout] Checking if NuGet feed 'https://my-artifactory-feed' is reachable...
[2026-03-20 02:10:31] [build-stdout] Querying NuGet feed 'https://my-artifactory-feed' failed in a timely manner. Not considering the feed for use. The reason for the failure: Response status code does not indicate success: 401.
```
Contributor guide
Research direction
Start by tracing the advanced-mode path for C# analysis with build-mode: none, focusing on where NuGet feeds are checked and packages are restored. Determine how authenticated feed credentials are expected to reach that path; done means authenticated feeds can be used without the reported 401 failures.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- build-system
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100