dotnet-build: disable audit using an environment variable

aspnetcore build invokes MSBuild twice, the first time to build
repotasks. It's not possible to customize that command line, in
particular, we can't suppress package audit. It makes the build die
with "Package 'System.Formats.Asn1' 8.0.0 has a known high severity
vulnerability", which we can't do anything about downstream.

So disable audit using an environment variable, which will apply to
all MSBuild invocations. Do this for all projects, since a similar
issue exists for SDK.

Signed-off-by: Ilya Leoshkevich <[email protected]>

Author: iii-i

dotnet-build

@@ -205,7 +205,6 @@ function build_aspnetcore {
         --configuration "$aspnetcore_conf"
         --pack
         "/p:DotNetAssetRootUrl=file://$DOWNLOADDIR/"
-        "/p:NuGetAudit=false"
     )
     if [ "$aspnetcore_build_id" != "" ]; then
         aspnetcore_build_flags+=(
@@ -268,6 +267,7 @@ else
     projects=(runtime msbuild roslyn aspnetcore sdk)
 fi
 
+export NuGetAudit=false
 for project in "${projects[@]}"; do
     eval "build_${project}"
 done