Securing Your NuGet Dependencies in the Age of AI
星期二, 11月 10
– PST
AI is changing how we build .NET apps, and it's changing how packages find their way into our code. Copilot and coding agents can add a dependency in seconds. Attackers know this, and they're moving just as fast. The question is no longer only which packages you trust. It's how trust holds up when machines are making the choices. In this session, Jon Douglas and friends from the NuGet team share how Microsoft is rethinking supply chain security for this new era. You'll see how security now spans the whole journey of a package, from the moment it's published to NuGet.org to the moment it's restored on your machine. On the registry side, that means catching malicious packages before they spread and raising the bar for who can publish. On the client side, it means giving you and your AI tools better signals and safer defaults at every step. You'll leave with a clear picture of where NuGet security is headed and simple steps to protect your projects today.
