[Fix]Release pipeline compliance (#556)

* Configure NuGet package sources for CI builds

Author: weiyuanyue

.github/workflows/build.yml

@@ -128,8 +128,21 @@ jobs:
         if (-not [string]::IsNullOrWhiteSpace("${{ secrets.LAF_PUBLISHER_ID }}")) {
           echo "LAF_PUBLISHER_ID=${{ secrets.LAF_PUBLISHER_ID }}" >> $env:GITHUB_ENV
         }
+    - name: Create ephemeral nuget config from template
+      shell: pwsh
+      run: |
+        $templatePath = "${{ github.workspace }}\nuget.config.template"
+        $configPath = "$env:RUNNER_TEMP\nuget.config"
+        
+        if (-not (Test-Path $templatePath)) {
+          Write-Error "Template file not found: $templatePath"
+          exit 1
+        }
+        
+        Copy-Item -Path $templatePath -Destination $configPath -Force
+        echo "EPHEMERAL_NUGET_CONFIG=$configPath" >> $env:GITHUB_ENV
     - name: Restore dependencies
-      run: dotnet restore AIDevGallery.sln -r win-${{ matrix.dotnet-arch }} /p:Configuration=${{ matrix.dotnet-configuration }} /p:Platform=${{ matrix.dotnet-arch }} /p:PublishReadyToRun=true /p:SelfContainedIfPreviewWASDK=true
+      run: dotnet restore AIDevGallery.sln -r win-${{ matrix.dotnet-arch }} /p:Configuration=${{ matrix.dotnet-configuration }} /p:Platform=${{ matrix.dotnet-arch }} /p:PublishReadyToRun=true /p:SelfContainedIfPreviewWASDK=true --configfile "${{ env.EPHEMERAL_NUGET_CONFIG }}"
     - name: Build
       run: |
         dotnet build AIDevGallery.Utils --no-restore /p:Configuration=${{ matrix.dotnet-configuration }} /p:LafToken="${{ env.LAF_TOKEN }}" /p:LafPublisherId="${{ env.LAF_PUBLISHER_ID }}"

.gitignore

@@ -398,4 +398,7 @@ FodyWeavers.xsd
 *.sln.iml
 
 # macOS
-.DS_Store
+.DS_Store
+
+# Local NuGet config (for development, to avoid SSCA compliance issues in ADO)
+nuget.config

Directory.Build.targets

@@ -2,4 +2,22 @@
   <ItemGroup>
     <PackageReference Include="StyleCop.Analyzers" PrivateAssets="All" />
   </ItemGroup>
+
+  <!-- Auto-create nuget.config from template for local development -->
+  <Target Name="EnsureNuGetConfig" BeforeTargets="CollectPackageReferences;Restore">
+    <PropertyGroup>
+      <NuGetConfigTemplate>$(MSBuildThisFileDirectory)nuget.config.template</NuGetConfigTemplate>
+      <NuGetConfigTarget>$(MSBuildThisFileDirectory)nuget.config</NuGetConfigTarget>
+    </PropertyGroup>
+    <Message Text="Checking for nuget.config..." Importance="low" />
+    <Copy SourceFiles="$(NuGetConfigTemplate)" 
+          DestinationFiles="$(NuGetConfigTarget)" 
+          Condition="Exists('$(NuGetConfigTemplate)') And !Exists('$(NuGetConfigTarget)')"
+          SkipUnchangedFiles="true">
+      <Output TaskParameter="CopiedFiles" ItemName="NuGetConfigCreated" />
+    </Copy>
+    <Message Text="Created nuget.config from template for local development" 
+             Importance="high" 
+             Condition="'@(NuGetConfigCreated)' != ''" />
+  </Target>
 </Project>

nuget.config nuget.config.templatenuget.config renamed to nuget.config.template

@@ -1,4 +1,4 @@
-<?xml version="1.0" encoding="utf-8"?>
+<?xml version="1.0" encoding="utf-8"?>
 <configuration>
   <packageSources>
     <clear />
@@ -13,4 +13,4 @@
       <package pattern="*Foundry*" />
     </packageSource>
   </packageSourceMapping>
-</configuration>
+</configuration>