8 posts about NuGet security by 5 contributors.
Know NuGet security? Share what you know with developers who are learning it.
Learn how to control package dependencies in GitHub using dependency review, Dependabot, registry permissions, repository rules, and CI/CD policy checks.
Learn how NuGet Trusted Publishing enables keyless .NET package releases using modern identity-based authentication to reduce long-lived credential and supply chain risks.
Learn how to automate NuGet API key rotation in GitHub Actions and safely manage 30-day credentials without disrupting .NET package publishing workflows.
Learn how NuGet Package Source Mapping prevents dependency confusion attacks in .NET applications by controlling package sources and securing software supply chains.
Learn how to migrate NuGet API keys to 30-day credentials and secure .NET CI/CD pipelines against credential leakage, unauthorized package publishing, and supply-chain attacks.
Build a tamper-resistant NuGet supply chain using package signing to verify package authenticity, protect build integrity, and reduce software supply chain risks.
Learn how to detect dependency confusion attacks in enterprise .NET builds by identifying malicious packages, namespace conflicts, NuGet risks, and software supply chain threats.
Discover 10 common NuGet packages and their potential risks, plus best practices for secure and performant .NET development.
DevSocialUpcoming · 3rd editionAI Agents ConferenceNov 23–27, 2026Live onlineMembers only17days leftRegisterPublish an article in this category and earn +1,000 SHARP when it is approved.
Write an article