Re-order sources to restore signed packages

microsoft · May 24, 2023 · 68649f2 · 68649f2
1 parent 0d079b4
commit 68649f2
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/NuGet.config b/NuGet.config
@@ -19,8 +19,10 @@
     <add key="dotnet-tools" value="https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-tools/nuget/v3/index.json" />
     <add key="dotnet-public" value="https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public/nuget/v3/index.json" />
     <add key="vs-impl" value="https://pkgs.dev.azure.com/azure-public/vside/_packaging/vs-impl/nuget/v3/index.json" />
-    <add key="vssdk-archived" value="https://pkgs.dev.azure.com/azure-public/vside/_packaging/vssdk-archived/nuget/v3/index.json" />
     <add key="vs-impl-archived" value="https://pkgs.dev.azure.com/azure-public/vside/_packaging/vs-impl-archived/nuget/v3/index.json" />
+    <!-- DON'T move this up. This feed contains some unsigned packages, at least Microsoft.VisualStudio.Telemetry, which we don't want to restore,
+    instead we want to restore it from vs-impl-archived, which has the package correctly signed. -->
+    <add key="vssdk-archived" value="https://pkgs.dev.azure.com/azure-public/vside/_packaging/vssdk-archived/nuget/v3/index.json" />
   </packageSources>
   <fallbackPackageFolders>
     <clear />