From 487ccc9f03e379d0563f099e731cb27813340631 Mon Sep 17 00:00:00 2001
From: "internalautomation[bot]"
 <85681268+internalautomation[bot]@users.noreply.github.com>
Date: Tue, 23 Apr 2024 14:33:00 -0500
Subject: [PATCH] GitHubSync update - release-8.0 (#1387)

* GitHubSync update - release-8.0

* Pins the version for System.Security.Cryptography.Pkcs to v8, to prevent from using a version with CVE

---------

Co-authored-by: internalautomation[bot] <85681268+internalautomation[bot]@users.noreply.github.com>
Co-authored-by: Tamara Rivera <tamita.rivera@gmail.com>
---
 src/Directory.Build.props                                  | 5 ++---
 src/Directory.Build.targets                                | 7 +++++++
 .../NServiceBus.Transport.RabbitMQ.CommandLine.csproj      | 4 ++++
 3 files changed, 13 insertions(+), 3 deletions(-)
 create mode 100644 src/Directory.Build.targets

diff --git a/src/Directory.Build.props b/src/Directory.Build.props
index 85a7cc2ff..7e3a698c3 100644
--- a/src/Directory.Build.props
+++ b/src/Directory.Build.props
@@ -7,8 +7,7 @@
     <EnableNETAnalyzers>true</EnableNETAnalyzers>
     <AnalysisLevel Condition="'$(AnalysisLevel)' == ''">5.0</AnalysisLevel>
     <EnforceCodeStyleInBuild>true</EnforceCodeStyleInBuild>
-    <!-- Will update this to 'all' in the future -->
-    <NuGetAuditMode>direct</NuGetAuditMode>
+    <!-- NuGetAuditMode set to 'all' for tool projects in Directory.Build.targets, other project types default to 'direct' -->
     <NuGetAuditLevel>low</NuGetAuditLevel>
     <!-- To lock the version of Particular.Analyzers, for example, in a release branch, set this property in Custom.Build.props -->
     <ParticularAnalyzersVersion Condition="'$(ParticularAnalyzersVersion)' == ''">2.1.2</ParticularAnalyzersVersion>
@@ -16,7 +15,7 @@
     <NServiceBusTestsKey>00240000048000009400000006020000002400005253413100040000010001007f16e21368ff041183fab592d9e8ed37e7be355e93323147a1d29983d6e591b04282e4da0c9e18bd901e112c0033925eb7d7872c2f1706655891c5c9d57297994f707d16ee9a8f40d978f064ee1ffc73c0db3f4712691b23bf596f75130f4ec978cf78757ec034625a5f27e6bb50c618931ea49f6f628fd74271c32959efb1c5</NServiceBusTestsKey>
   </PropertyGroup>
 
-  <PropertyGroup Condition="'$(CI)' != '' Or '$(TEAMCITY_VERSION)' != ''">
+  <PropertyGroup Condition="'$(CI)' != ''">
     <ContinuousIntegrationBuild>true</ContinuousIntegrationBuild>
   </PropertyGroup>
 
diff --git a/src/Directory.Build.targets b/src/Directory.Build.targets
new file mode 100644
index 000000000..d47a6af61
--- /dev/null
+++ b/src/Directory.Build.targets
@@ -0,0 +1,7 @@
+<Project>
+
+  <PropertyGroup>
+    <NuGetAuditMode Condition="'$(PackAsTool)' == 'true'">all</NuGetAuditMode>
+  </PropertyGroup>
+
+</Project>
diff --git a/src/NServiceBus.Transport.RabbitMQ.CommandLine/NServiceBus.Transport.RabbitMQ.CommandLine.csproj b/src/NServiceBus.Transport.RabbitMQ.CommandLine/NServiceBus.Transport.RabbitMQ.CommandLine.csproj
index 46335f732..83790c390 100644
--- a/src/NServiceBus.Transport.RabbitMQ.CommandLine/NServiceBus.Transport.RabbitMQ.CommandLine.csproj
+++ b/src/NServiceBus.Transport.RabbitMQ.CommandLine/NServiceBus.Transport.RabbitMQ.CommandLine.csproj
@@ -35,5 +35,9 @@
   <ItemGroup>
     <InternalsVisibleTo Include="NServiceBus.Transport.RabbitMQ.CommandLine.Tests" Key="$(NServiceBusTestsKey)" />
   </ItemGroup>
+  
+  <ItemGroup Label="Pinned transitive dependencies">
+    <PackageReference Include="System.Security.Cryptography.Pkcs" Version="8.0.0" />
+  </ItemGroup>
 
 </Project>