Merge pull request #85 from dorssel/fix_dependency_detector

Fix dependency detector

Author: dorssel

.gitattributes

@@ -20,3 +20,5 @@
 *.cs       text eol=crlf
 *.props    text
 *.targets  text
+
+packages.lock.json  text linguist-generated

.github/workflows/dotnet.yml

@@ -101,9 +101,8 @@ jobs:
       - name: Submit Dependencies to GitHub
         uses: advanced-security/component-detection-dependency-submission-action@9c110eb34dee187cd9eca76a652b9f6a0ed22927 # v0.1.1
         with:
-          detectorArgs: MSBuildBinaryLog=EnableIfDefaultOff
-          # This should really read 'MSBuildBinaryLog', but since it is experimental we need this 'Linux' workaround.
-          detectorsFilter: Linux
+          detectorArgs: MSBuildBinaryLog=Enable
+          detectorsFilter: MSBuildBinaryLog
 
       - name: Dependency Review
         if: github.event_name == 'pull_request'

Directory.Build.props

@@ -36,6 +36,9 @@ SPDX-License-Identifier: MIT
     <IsTrimmable>true</IsTrimmable>
     <AssemblyOriginatorKeyFile>$(MSBuildThisFileDirectory)\strongname.snk</AssemblyOriginatorKeyFile>
 
+    <!-- GitVersion will handle this -->
+    <IncludeSourceRevisionInInformationalVersion>false</IncludeSourceRevisionInInformationalVersion>
+
     <!-- Bump MSTest.Sdk "transitive" dependencies (they are actually direct dependencies) -->
     <MicrosoftTestingExtensionsCodeCoverageVersion>18.8.0</MicrosoftTestingExtensionsCodeCoverageVersion>
 
@@ -59,6 +62,12 @@ SPDX-License-Identifier: MIT
     <SymbolPackageFormat>snupkg</SymbolPackageFormat>
   </PropertyGroup>
 
+  <!-- Required for Dependabot -->
+  <PropertyGroup Label="Dependabot" Condition="'$(DEPENDABOT)' == 'true'">
+    <RestoreLockedMode>false</RestoreLockedMode>
+    <GitVersion_AllowShallowEnabled>true</GitVersion_AllowShallowEnabled>
+  </PropertyGroup>
+
   <ItemGroup>
     <PackageReference Include="GitVersion.MsBuild" PrivateAssets="all" />
   </ItemGroup>