Gate the NuGet packages your agent adds: a lock file, the audit, and a short script for what advisories miss
An agent that adds a package changes your supply chain in one line of a .csproj. Fifteen minutes to put a gate on it, any agent.
12 min read
Nuget