From d2b706068630702c42b7fa2de2e07c4526650ba5 Mon Sep 17 00:00:00 2001
From: Jacob Viau <javia@microsoft.com>
Date: Mon, 4 Nov 2024 09:24:42 -0800
Subject: [PATCH] Fail build on critical package (#10590)

---
 Directory.Build.props | 16 ++++++++++++++++
 build/common.props    |  1 -
 2 files changed, 16 insertions(+), 1 deletion(-)

diff --git a/Directory.Build.props b/Directory.Build.props
index d80a4bdd7c..20c7ec1f73 100644
--- a/Directory.Build.props
+++ b/Directory.Build.props
@@ -13,4 +13,20 @@
     <EngRoot>$(RepoRoot)eng/</EngRoot>
   </PropertyGroup>
 
+  <PropertyGroup>
+    <ContinuousIntegrationBuild>false</ContinuousIntegrationBuild>
+    <ContinuousIntegrationBuild Condition="'$(TF_BUILD)' == 'true'">true</ContinuousIntegrationBuild>
+    <CI>$(ContinuousIntegrationBuild)</CI>
+  </PropertyGroup>
+
+  <PropertyGroup>
+    <!-- Nuget audit as warnings only, even in TreatWarningsAsErrors. -->
+    <!-- Except for in CI, critical will fail the build. -->
+    <WarningsNotAsErrors>$(WarningsNotAsErrors);NU1901;NU1902;NU1903</WarningsNotAsErrors>
+    <WarningsNotAsErrors Condition="'$(CI)' == 'false'">$(WarningsNotAsErrors)NU1904</WarningsNotAsErrors>
+    <WarningsAsErrors Condition="'$(CI)' == 'true'">$(WarningsAsErrors)NU1904</WarningsAsErrors>
+    <NuGetAuditLevel>moderate</NuGetAuditLevel> <!-- warn on moderate severity only. -->
+    <NuGetAuditMode>all</NuGetAuditMode> <!-- audit transitive dependencies. -->
+  </PropertyGroup>
+
 </Project>
diff --git a/build/common.props b/build/common.props
index b796874d6f..46363b9e31 100644
--- a/build/common.props
+++ b/build/common.props
@@ -21,7 +21,6 @@
     <CodeAnalysisRuleSet>$(MSBuildThisFileDirectory)..\src.ruleset</CodeAnalysisRuleSet>
     <NoWarn>$(NoWarn);NU1701</NoWarn>
 
-    <ContinuousIntegrationBuild Condition="'$(TF_BUILD)' == 'true'">true</ContinuousIntegrationBuild>
     <DebugType>embedded</DebugType>
     <GenerateRuntimeConfigDevFile>true</GenerateRuntimeConfigDevFile><!-- https://github.com/dotnet/runtime/issues/54684 -->
     <DisableImplicitNamespaceImports>true</DisableImplicitNamespaceImports>