Skip to content

[Repo Assist] eng: add src/Directory.Build.props with analyzer and NuGet audit settings #211

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
github-actions wants to merge 1 commit into from
Closed

[Repo Assist] eng: add src/Directory.Build.props with analyzer and NuGet audit settings #211

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
30 changes: 30 additions & 0 deletions src/Directory.Build.props
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,30 @@
<Project>

<!--
Shared build configuration for OpenClaw.Shared, OpenClaw.Tray.WinUI, and OpenClaw.Cli.

OpenClaw.CommandPalette has its own Directory.Build.props one level deeper, so MSBuild
stops walking up at that file and this one does NOT apply to CommandPalette.

Properties here set a consistent quality baseline that matches the CommandPalette project's
existing settings and are safe defaults for all src projects:
- NET analyzers + Recommended rule set: catch common bugs and anti-patterns
- NuGetAudit covers transitive packages so CVEs in indirect deps surface during restore
-->

<PropertyGroup>
<!-- Enable the built-in .NET source analyzers (already the SDK default for net5+,
but made explicit here so the intent is clear and auditable). -->
<EnableNETAnalyzers>true</EnableNETAnalyzers>

<!-- Recommended rule set: a superset of Default that enables additional quality rules
aligned with the CommandPalette project's AnalysisMode=Recommended setting.
Rules produce warnings only; src projects do not set TreatWarningsAsErrors. -->
<AnalysisMode>Recommended</AnalysisMode>

<!-- Audit all package dependencies (direct + transitive) for known CVEs during restore.
Defaults to "direct" in the SDK; "all" provides broader security coverage. -->
<NuGetAuditMode>all</NuGetAuditMode>
</PropertyGroup>

</Project>