This commit is contained in:
@@ -4,6 +4,27 @@
|
||||
|
||||
If any packages have been changed in the release do a thorough security scan and check of each package.
|
||||
|
||||
### Security checks and tools
|
||||
|
||||
#### NPM
|
||||
|
||||
https://snyk.io/blog/ten-npm-security-best-practices/
|
||||
https://docs.npmjs.com/cli/v8/commands/npm-audit
|
||||
|
||||
```dos
|
||||
npm doctor
|
||||
npm audit
|
||||
```
|
||||
|
||||
#### Nuget
|
||||
|
||||
https://docs.microsoft.com/en-us/nuget/concepts/security-best-practices
|
||||
|
||||
```dos
|
||||
dotnet list package --deprecated
|
||||
dotnet list package --vulnerable
|
||||
```
|
||||
|
||||
## Bump version numbers
|
||||
|
||||
Search and replace 8.0.7 version number in the following:
|
||||
|
||||
Reference in New Issue
Block a user