-
Notifications
You must be signed in to change notification settings - Fork 496
Add AllowInsecureConnections to push command #3456
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
Fixes: NuGet/Home#14460 according to NuGet/NuGet.Client#6666
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
This PR adds documentation for the -AllowInsecureConnections
option to the NuGet CLI push command reference, allowing users to push packages to HTTP sources when necessary.
- Added documentation for the
-AllowInsecureConnections
parameter in the CLI push command reference
@@ -28,6 +28,9 @@ where `<packagePath>` identifies the package to push to the server. | |||
|
|||
## Options | |||
|
|||
- **`-AllowInsecureConnections`** |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The option name should be consistent with typical CLI parameter formatting. Consider using --allow-insecure-connections
(kebab-case with double dashes) or -AllowInsecureConnections
if following PowerShell-style conventions, but verify this matches the actual implementation.
Copilot uses AI. Check for mistakes.
@@ -28,6 +28,9 @@ where `<packagePath>` identifies the package to push to the server. | |||
|
|||
## Options | |||
|
|||
- **`-AllowInsecureConnections`** | |||
Allows pushing to HTTP sources (insecure). | |||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The documentation should include a security warning about the risks of using insecure connections, such as potential exposure of API keys and package contents to network interception.
> [!Warning] | |
> Using insecure (HTTP) connections can expose your API keys and package contents to interception by malicious actors. Avoid using this option unless absolutely necessary and only in trusted environments. Always prefer secure (HTTPS) connections to protect sensitive information. |
Copilot uses AI. Check for mistakes.
Learn Build status updates of commit 8d51573: ✅ Validation status: passed
For more details, please refer to the build report. |
Learn Build status updates of commit b8bc6bf: ✅ Validation status: passed
For more details, please refer to the build report. |
Fixes: NuGet/Home#14460
according to NuGet/NuGet.Client#6666