For projects based on package references in package files (PackageReference), the following flags setup is recommended:
nuget.resolvePackagesConfigFiles=false
nuget.resolveCsProjFiles=true
nuget.resolveAssetsFiles=true
For projects based on packages.config, the following flags setup is recommended:
NOTE: It is highly recommended to use NuGet version 4.9 or higher in this case, as the Unified Agent will be able to generate the corresponding packages.lock.json file for better resolution.
nuget.resolvePackagesConfigFiles=true
nuget.resolveCsProjFiles=true
nuget.resolveAssetsFiles=false
For both package manager formats, please set the nuget.runPreStep to true if the project is not built prior to the scan.
For more information, see the see the Configuration File & Parameters page.