C#: Do not manually add public feed when private registries are used

This commit is contained in:
Michael B. Gale
2025-03-25 10:14:03 +00:00
parent d2b88ae5a8
commit 4d3b0246b5

View File

@@ -274,7 +274,6 @@ namespace Semmle.Extraction.CSharp.DependencyFetching
// to `dotnet` ignores other feeds that may be configured, we also need to add the feeds
// we have discovered from analysing `nuget.config` files.
var sources = configuredSources ?? new();
sources.Add(PublicNugetOrgFeed);
this.dependabotProxy.RegistryURLs.ForEach(url => sources.Add(url));
// Add package sources. If any are present, they override all sources specified in