You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
dotnet list package --vulnerable is a great feature we can use in CI workflows.
It would be great to quickly know if a project is vulnerable during the CI processes without having to parse the output of the command.
A quick way to achieve this would be to add an option like --exit-code (just an example) and then the command would return a non-zero exit code if there is at least one vulnerable package.
Additional Context and Details
No response
loic-sharma, zhech2, johanlindfors, DonkeyKongJr, appel1 and 56 more