Check reachability of inherited feeds

mbg · mbg · commit 7a8e10e17e31 · 2026-02-27T14:32:01.000Z
diff --git a/csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/NugetPackageRestorer.cs b/csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/NugetPackageRestorer.cs
@@ -132,10 +132,10 @@ public HashSet<AssemblyLookupLocation> Restore()
                     this.dependabotProxy?.RegistryURLs.ForEach(url => explicitFeeds.Add(url));
 
                     var explicitFeedsReachable = this.CheckSpecifiedFeeds(explicitFeeds);
+                    this.GetReachableNuGetFeeds(inheritedFeeds, isFallback: false);
 
                     if (inheritedFeeds.Count > 0)
                     {
-                        logger.LogInfo($"Inherited NuGet feeds (not checked for reachability): {string.Join(", ", inheritedFeeds.OrderBy(f => f))}");
                         compilationInfoContainer.CompilationInfos.Add(("Inherited NuGet feed count", inheritedFeeds.Count.ToString()));
                     }
 

Original file line number	Diff line number	Diff line change
`@@ -132,10 +132,10 @@ public HashSet<AssemblyLookupLocation> Restore()`
`132`	`132`	`this.dependabotProxy?.RegistryURLs.ForEach(url => explicitFeeds.Add(url));`
`133`	`133`
`134`	`134`	`var explicitFeedsReachable = this.CheckSpecifiedFeeds(explicitFeeds);`
	`135`	`+ this.GetReachableNuGetFeeds(inheritedFeeds, isFallback: false);`
`135`	`136`
`136`	`137`	`if (inheritedFeeds.Count > 0)`
`137`	`138`	`{`
`138`		`- logger.LogInfo($"Inherited NuGet feeds (not checked for reachability): {string.Join(", ", inheritedFeeds.OrderBy(f => f))}");`
`139`	`139`	`compilationInfoContainer.CompilationInfos.Add(("Inherited NuGet feed count", inheritedFeeds.Count.ToString()));`
`140`	`140`	`}`
`141`	`141`