NuGet Use HTTPS with remote repositories

use_https_remote_repositories_nuget

Severity

low

Remediation Complexity

trivial

Remediation Risk

low

Remediation Effort

low

Family

Use HTTPS with remote repositories

Description

The access to remote repositories must be used with HTTPS protocol.

Security

If you use https protocol man-in-the-middle attacks can be avoided.

Examples

<?xml version="1.0" encoding="utf-8"?>
<configuration>
  <packageSources>
    <clear />
    <add key="contoso.com" value="http://contoso.com/packages/" />
  </packageSources>

  ...
</configuration>

Mitigation / Fix

You can remove the repositories from the configuration files or use HTTPS protocol if it is available.