From fde5227fbfe9c61b7861cc959ebbbba62af4754b Mon Sep 17 00:00:00 2001
From: Tingluo Huang <tingluohuang@github.com>
Date: Mon, 9 Dec 2024 13:49:18 -0500
Subject: [PATCH] Enable nuget audit. (#3615)

---
 src/Directory.Build.props | 9 +++++++++
 src/Sdk/Sdk.csproj        | 2 ++
 2 files changed, 11 insertions(+)

diff --git a/src/Directory.Build.props b/src/Directory.Build.props
index 9db5faca3..9c069b12f 100644
--- a/src/Directory.Build.props
+++ b/src/Directory.Build.props
@@ -57,4 +57,13 @@
   <PropertyGroup>
     <TreatWarningsAsErrors>true</TreatWarningsAsErrors>
   </PropertyGroup>
+
+  <PropertyGroup>
+    <!-- Enable NuGet package auditing -->
+    <NuGetAudit>true</NuGetAudit>
+    <!-- Audit direct and transitive packages -->
+    <NuGetAuditMode>all</NuGetAuditMode>
+    <!-- Report low, moderate, high and critical advisories -->
+    <NuGetAuditLevel>moderate</NuGetAuditLevel>
+  </PropertyGroup>
 </Project>
diff --git a/src/Sdk/Sdk.csproj b/src/Sdk/Sdk.csproj
index ce7f97c88..5f2c3fd55 100644
--- a/src/Sdk/Sdk.csproj
+++ b/src/Sdk/Sdk.csproj
@@ -26,6 +26,8 @@
         <PackageReference Include="YamlDotNet.Signed" Version="5.3.0" />
         <PackageReference Include="System.Net.Http" Version="4.3.4" />
         <PackageReference Include="System.Text.RegularExpressions" Version="4.3.1" />
+        <PackageReference Include="System.Private.Uri" Version="4.3.2" />
+        <PackageReference Include="System.Formats.Asn1" Version="8.0.1" />
     </ItemGroup>
 
     <ItemGroup>