Signed NuGet package validation enabled for .NET 6

[mthalman]

Signed NuGet package validation enabled for .NET 6

Linux-based .NET SDK 6 container images are now enabled to perform validation for signed NuGet packages.

Details

Related issue: #3932

For the 6.0.400 release, the NuGet team has re-enabled signed NuGet package validation (NuGet/NuGet.Client#4706, NuGet/NuGet.Client#4720). For the .NET SDK container images, we've opted into this functionality by setting the DOTNET_NUGET_SIGNATURE_VERIFICATION variable to true. This will take effect when running a dotnet restore command. This will ensure that any signed NuGet packages that are restored are valid. This change only applies to Linux since it has always been done in Windows.

Affected tags:

• All tags that start with mcr.microsoft.com/dotnet/sdk:6.0 when targeting Linux containers.