skills/dotnet__skills
1
0
Fork 0
mirror of https://github.com/dotnet/skills.git synced 2026-09-20 09:49:54 +08:00
Code Issues Packages Projects Releases Wiki Activity

Tighten known-domains allowlist (#496)

Browse Source 
* Tighten known-domains allowlist

Narrow broad domain entries to specific paths/subdomains actually used:
- aka.ms -> aka.ms/dotnet-trace, aka.ms/perfcollect
- nuget.org -> api.nuget.org, www.nuget.org/account/trustedpublishing
- npmjs.com/package/@modelcontextprotocol -> pinned to inspector/v/0.21.1

Remove unused domains: fluentassertions.com, speedscope.app
Update skill content to match: pin MCP Inspector link, remove
FluentAssertions link, remove speedscope hyperlink.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* updated mcp skills codeowner

* Refine scoped known-domain entries

Remove the remaining nugettest.org publish example and drop the nugettest.org allowlist entry. Also normalize path-scoped entries to omit a hardcoded www prefix so both host forms match the existing ReferenceScanner logic.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Leslie Richardson <lerich@microsoft.com>
This commit is contained in:
Dan Moseley
2026-04-01 21:35:54 -06:00
committed by GitHub
parent eb0f98eba6
commit 165e6439fe
6 changed files with 16 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/CODEOWNERS
+8 -8
View File
@@ -24,17 +24,17 @@
/plugins/dotnet/agents/optimizing-dotnet-performance.agent.md @dotnet/appmodel
/plugins/dotnet-ai/skills/mcp-csharp-create/ @leslierichardson95 @artl93
/tests/dotnet-ai/mcp-csharp-create/ @leslierichardson95 @artl93
/plugins/dotnet-ai/skills/mcp-csharp-create/ @leslierichardson95 @mikekistler
/tests/dotnet-ai/mcp-csharp-create/ @leslierichardson95 @mikekistler
/plugins/dotnet-ai/skills/mcp-csharp-debug/ @leslierichardson95 @artl93
/tests/dotnet-ai/mcp-csharp-debug/ @leslierichardson95 @artl93
/plugins/dotnet-ai/skills/mcp-csharp-debug/ @leslierichardson95 @mikekistler
/tests/dotnet-ai/mcp-csharp-debug/ @leslierichardson95 @mikekistler
/plugins/dotnet-ai/skills/mcp-csharp-publish/ @leslierichardson95 @artl93
/tests/dotnet-ai/mcp-csharp-publish/ @leslierichardson95 @artl93
/plugins/dotnet-ai/skills/mcp-csharp-publish/ @leslierichardson95 @mikekistler
/tests/dotnet-ai/mcp-csharp-publish/ @leslierichardson95 @mikekistler
/plugins/dotnet-ai/skills/mcp-csharp-test/ @leslierichardson95 @artl93
/tests/dotnet-ai/mcp-csharp-test/ @leslierichardson95 @artl93
/plugins/dotnet-ai/skills/mcp-csharp-test/ @leslierichardson95 @mikekistler
/tests/dotnet-ai/mcp-csharp-test/ @leslierichardson95 @mikekistler
# dotnet-upgrade (migrating and upgrading .NET projects)
/plugins/dotnet-upgrade/skills/thread-abort-migration/ @dotnet/appmodel
eng/known-domains.txt
+6 -9
View File
@@ -16,11 +16,12 @@ microsoft.com
modelcontextprotocol.io
# Tools
aka.ms
aka.ms/dotnet-trace
aka.ms/perfcollect
api.nuget.org
download.sysinternals.com
msdl.microsoft.com
nuget.org
nugettest.org
nuget.org/account/trustedpublishing
dotnetcli.blob.core.windows.net
# Platforms
@@ -57,12 +58,8 @@ github.com/yourusername
github.com/username
# Community
fluentassertions.com
npmjs.com/package/@modelcontextprotocol
ollama.com
stackoverflow.com
## Cannot pin npmjs package by hash, only version
npmjs.com/package/@modelcontextprotocol/inspector/v/0.21.1
xunit.net
# UI helpers
speedscope.app
plugins/dotnet-ai/skills/mcp-csharp-debug/SKILL.md
+1 -1
View File
@@ -209,5 +209,5 @@ builder.Logging.AddConsole(options =>
## More Info
- [MCP Inspector](https://www.npmjs.com/package/@modelcontextprotocol/inspector) — Interactive debugging tool for MCP servers
- [MCP Inspector](https://www.npmjs.com/package/@modelcontextprotocol/inspector/v/0.21.1) — Interactive debugging tool for MCP servers
- [VS Code MCP documentation](https://code.visualstudio.com/docs/copilot/chat/mcp-servers) — Configuring MCP servers in VS Code
plugins/dotnet-ai/skills/mcp-csharp-publish/references/nuget-packaging.md
-5
View File
@@ -68,11 +68,6 @@ dotnet tool uninstall --global YourUsername.MyMcpServer
dotnet nuget push bin/Release/*.nupkg \
--api-key YOUR_NUGET_API_KEY \
--source https://api.nuget.org/v3/index.json
# Or push to NuGet test environment first
dotnet nuget push bin/Release/*.nupkg \
--api-key YOUR_NUGET_API_KEY \
--source https://apiint.nugettest.org/v3/index.json
```
## User Configuration
plugins/dotnet-ai/skills/mcp-csharp-test/SKILL.md
-1
View File
@@ -188,4 +188,3 @@ For the evaluation format, example questions, and detailed guidance, see [refere
## More Info
- [xUnit documentation](https://xunit.net/docs/getting-started/netcore/cmdline) — Getting started with xUnit for .NET
- [FluentAssertions](https://fluentassertions.com/) — Readable assertion library for .NET
plugins/dotnet-diag/skills/dotnet-trace-collect/references/dotnet-trace-collect.md
+1 -1
View File
@@ -64,7 +64,7 @@ dotnet-trace collect -p <PID> --format speedscope
| Format | Extension | Analysis Tool |
|--------|-----------|---------------|
| `nettrace` (default) | `.nettrace` | PerfView, Visual Studio, `dotnet-trace report` |
| `speedscope` | `.speedscope.json` | [Speedscope](https://www.speedscope.app/) (web) |
| `speedscope` | `.speedscope.json` | Speedscope |
| `chromium` | `.chromium.json` | Chrome DevTools (chrome://tracing) |
## Container Usage