Skip to content

Commit c2723ca

Browse files
committed
SDK(C#): lock package dependencies to a specific hash
To avoid someone injecting a malicious binary with the same version in the future, lock all dependencies. Signed-off-by: Edwin Török <[email protected]>
1 parent 12477d4 commit c2723ca

File tree

2 files changed

+85
-0
lines changed

2 files changed

+85
-0
lines changed

ocaml/sdk-gen/csharp/autogen/src/XenServer.csproj

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,7 @@
1818
<PackageIcon>packageIcon.png</PackageIcon>
1919
<RepositoryType>git</RepositoryType>
2020
<PackageReadmeFile>README-NuGet.md</PackageReadmeFile>
21+
<RestorePackagesWithLockFile>true</RestorePackagesWithLockFile>
2122
</PropertyGroup>
2223
<ItemGroup>
2324
<None Include="..\LICENSE" Pack="true" PackagePath="LICENSE" />
Lines changed: 84 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,84 @@
1+
{
2+
"version": 1,
3+
"dependencies": {
4+
".NETFramework,Version=v4.5": {
5+
"Microsoft.NETFramework.ReferenceAssemblies": {
6+
"type": "Direct",
7+
"requested": "[1.0.2, )",
8+
"resolved": "1.0.2",
9+
"contentHash": "5/cSEVld+px/CuRrbohO/djfg6++eR6zGpy88MgqloXvkj//WXWpFZyu/OpkXPN0u5m+dN/EVwLNYFUxD4h2+A==",
10+
"dependencies": {
11+
"Microsoft.NETFramework.ReferenceAssemblies.net45": "1.0.2"
12+
}
13+
},
14+
"Newtonsoft.Json": {
15+
"type": "Direct",
16+
"requested": "[13.0.3, )",
17+
"resolved": "13.0.3",
18+
"contentHash": "HrC5BXdl00IP9zeV+0Z848QWPAoCr9P3bDEZguI+gkLcBKAOxix/tLEAAHC+UvDNPv4a2d18lOReHMOagPa+zQ=="
19+
},
20+
"Microsoft.NETFramework.ReferenceAssemblies.net45": {
21+
"type": "Transitive",
22+
"resolved": "1.0.2",
23+
"contentHash": "Nm14pRmqB+4u2JEMdtngnbDcJidTmswMxOJ992TpTwiwcUTERxLlHwwSh0HiUoRjS0TO0sozsiB0h6FHjCUdEA=="
24+
}
25+
},
26+
".NETStandard,Version=v2.0": {
27+
"NETStandard.Library": {
28+
"type": "Direct",
29+
"requested": "[2.0.3, )",
30+
"resolved": "2.0.3",
31+
"contentHash": "st47PosZSHrjECdjeIzZQbzivYBJFv6P2nv4cj2ypdI204DO+vZ7l5raGMiX4eXMJ53RfOIg+/s4DHVZ54Nu2A==",
32+
"dependencies": {
33+
"Microsoft.NETCore.Platforms": "1.1.0"
34+
}
35+
},
36+
"Newtonsoft.Json": {
37+
"type": "Direct",
38+
"requested": "[13.0.3, )",
39+
"resolved": "13.0.3",
40+
"contentHash": "HrC5BXdl00IP9zeV+0Z848QWPAoCr9P3bDEZguI+gkLcBKAOxix/tLEAAHC+UvDNPv4a2d18lOReHMOagPa+zQ=="
41+
},
42+
"System.Diagnostics.DiagnosticSource": {
43+
"type": "Direct",
44+
"requested": "[8.0.1, )",
45+
"resolved": "8.0.1",
46+
"contentHash": "vaoWjvkG1aenR2XdjaVivlCV9fADfgyhW5bZtXT23qaEea0lWiUljdQuze4E31vKM7ZWJaSUsbYIKE3rnzfZUg==",
47+
"dependencies": {
48+
"System.Memory": "4.5.5",
49+
"System.Runtime.CompilerServices.Unsafe": "6.0.0"
50+
}
51+
},
52+
"Microsoft.NETCore.Platforms": {
53+
"type": "Transitive",
54+
"resolved": "1.1.0",
55+
"contentHash": "kz0PEW2lhqygehI/d6XsPCQzD7ff7gUJaVGPVETX611eadGsA3A877GdSlU0LRVMCTH/+P3o2iDTak+S08V2+A=="
56+
},
57+
"System.Buffers": {
58+
"type": "Transitive",
59+
"resolved": "4.5.1",
60+
"contentHash": "Rw7ijyl1qqRS0YQD/WycNst8hUUMgrMH4FCn1nNm27M4VxchZ1js3fVjQaANHO5f3sN4isvP4a+Met9Y4YomAg=="
61+
},
62+
"System.Memory": {
63+
"type": "Transitive",
64+
"resolved": "4.5.5",
65+
"contentHash": "XIWiDvKPXaTveaB7HVganDlOCRoj03l+jrwNvcge/t8vhGYKvqV+dMv6G4SAX2NoNmN0wZfVPTAlFwZcZvVOUw==",
66+
"dependencies": {
67+
"System.Buffers": "4.5.1",
68+
"System.Numerics.Vectors": "4.4.0",
69+
"System.Runtime.CompilerServices.Unsafe": "4.5.3"
70+
}
71+
},
72+
"System.Numerics.Vectors": {
73+
"type": "Transitive",
74+
"resolved": "4.4.0",
75+
"contentHash": "UiLzLW+Lw6HLed1Hcg+8jSRttrbuXv7DANVj0DkL9g6EnnzbL75EB7EWsw5uRbhxd/4YdG8li5XizGWepmG3PQ=="
76+
},
77+
"System.Runtime.CompilerServices.Unsafe": {
78+
"type": "Transitive",
79+
"resolved": "6.0.0",
80+
"contentHash": "/iUeP3tq1S0XdNNoMz5C9twLSrM/TH+qElHkXWaPvuNOt+99G75NrV0OS2EqHx5wMN7popYjpc8oTjC1y16DLg=="
81+
}
82+
}
83+
}
84+
}

0 commit comments

Comments
 (0)