From 0fe8604fd66400a9bfdc0d1cad107d958c3cc34a Mon Sep 17 00:00:00 2001 From: Jonathan Peppers Date: Tue, 25 Aug 2026 13:41:22 -0500 Subject: [PATCH] [ci] Keep NuGet revocation checks offline Prevent NuGet package-signing verification from contacting public OCSP responders in network-isolated Azure builds. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --- build/ci/variables.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/build/ci/variables.yml b/build/ci/variables.yml index 7b12feedb..2c5553a4c 100644 --- a/build/ci/variables.yml +++ b/build/ci/variables.yml @@ -8,6 +8,7 @@ variables: configuration: Release # Build configuration: 'Debug', 'Release' verbosity: 'normal' # Build verbosity: 'minimal', 'normal', 'diagnostic' DOTNET_SYSTEM_NET_SECURITY_NOREVOCATIONCHECKBYDEFAULT: true + NUGET_CERT_REVOCATION_MODE: offline DOTNET_CLI_WORKLOAD_UPDATE_NOTIFY_DISABLE: true DOTNET_SDK_VULNERABILITY_CHECK_DISABLE: true NuGetAudit: false