Skip to content

Commit 657672e

Browse files
authored
Fix Secure Supply Chain compliance issues (#11548)
## Description Resolves Secure Supply Chain warnings. ### Type of Change - Bug fix (non-breaking change which fixes an issue) ### Why To meet compliance requirements. Closes #11209 Closes #10374 ### What * Removed invalid `nuget.config` configurations * Removed unnecessary `.npmrc` files * Temporarily left nuget.org feed in config (tracking: #11557) ## Screenshots N/A ## Testing N/A
1 parent 3515e29 commit 657672e

File tree

18 files changed

+20
-91
lines changed

18 files changed

+20
-91
lines changed

.gitignore

+6
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,12 @@ node_modules
3333
# Optional REPL history
3434
.node_repl_history
3535

36+
# No NPM config to pass CFS compliance
37+
.npmrc
38+
39+
# We use yarn, not npm
40+
package-lock.json
41+
3642
#React Native
3743
*AppPackages*
3844
*BundleArtifacts*

NuGet.Config

+7-1
Original file line numberDiff line numberDiff line change
@@ -4,5 +4,11 @@
44
<add key="enabled" value="True" />
55
<add key="automatic" value="True" />
66
</packageRestore>
7-
<!-- Note: Do not specify any NuGet feeds in this file, everything is available on the fallback NuGet.org. -->
7+
<packageSources>
8+
<clear />
9+
<!-- Warning: Never add more NuGet feeds, to be compliant this repo must only rely on this single ADO feed. -->
10+
<add key="react-native" value="https://pkgs.dev.azure.com/ms/react-native/_packaging/react-native-public/nuget/v3/index.json" />
11+
<!-- Remove (comment out) the nuget.org feed once our ADO feed is configured correctly. See https://github.com/microsoft/react-native-windows/issues/11557 -->
12+
<add key="nuget.org" value="https://api.nuget.org/v3/index.json" />
13+
</packageSources>
814
</configuration>
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
{
2+
"type": "prerelease",
3+
"comment": "Fix Secure Supply Chain compliance issues",
4+
"packageName": "react-native-windows",
5+
"email": "[email protected]",
6+
"dependentChangeType": "patch"
7+
}

packages/e2e-test-app-fabric/.npmrc

-1
This file was deleted.

packages/e2e-test-app/.npmrc

-1
This file was deleted.

packages/e2e-test-app/windows/NuGet.Config

-6
This file was deleted.

packages/integration-test-app/windows/NuGet.Config

-6
This file was deleted.

packages/playground/windows/NuGet.Config

-14
This file was deleted.

packages/sample-apps/.npmrc

-1
This file was deleted.

packages/sample-apps/windows/NuGet.Config

-6
This file was deleted.

vnext/.npmrc

-1
This file was deleted.

vnext/Desktop.ABITests/NuGet.Config

-8
This file was deleted.

vnext/Desktop.DLL/NuGet.Config

-7
This file was deleted.

vnext/Desktop.IntegrationTests/NuGet.Config

-8
This file was deleted.

vnext/Desktop.UnitTests/NuGet.Config

-8
This file was deleted.

vnext/Desktop/NuGet.Config

-8
This file was deleted.

vnext/NuGet.Config

-7
This file was deleted.

vnext/ReactCommon.UnitTests/NuGet.Config

-8
This file was deleted.

0 commit comments

Comments
 (0)