NuGet Package Publish Runner Security Update

First implementation of NuGet Package Publish runner contained a bug. In the build log it logged the full commandline to calling nuget.exe process. As it turned out this commandline contained used NuGet.org API key.

I fixed the issue on Aug 25-th.

Thanks to @hazzik who noticed that TeamCity.CodeBetter.com is running on older version of plugin and thus unveils API keys.

On Sunday, 02 October 2011, Hadi @hhariri updated NuGet TeamCity plugin on TeamCity.CodeBetter.com to make the issue fixed. If you use NuGet Package Publish runner on TeamCity.CodeBetter.com please consider to change your API key.

You may check there is no more leak of NuGet API key in fresh YouTrackSharp build logs

Download and Info:

For more information, see NuGet plugin home page at:
http://confluence.jetbrains.net/display/TW/NuGet+support
or download a latest build from TeamCity here
comments powered by Disqus