For projects based on package references in package files (PackageReference), the following flags setup is recommended:
- nuget.resolvePackagesConfigFiles=false
- nuget.resolveCsProjFiles=true
- nuget.resolveAssetsFiles=true
For projects based on packages.config, the following flags setup is recommended:
NOTE: It is highly recommended to use NuGet version 4.9 or higher in this case, as the Unified Agent will be able to generate the corresponding packages.lock.json file for better resolution.
- nuget.resolvePackagesConfigFiles=true
- nuget.resolveCsProjFiles=true
- nuget.resolveAssetsFiles=false
For both package manager formats, please set the nuget.runPreStep to true if the project is not built prior to the scan.
For more information, see the Configuration File & Parameters page.