Azure DevOps Extension for .NET Package Audit | Vulnerable, Deprecated and Outdated NuGet Checks

Published 06/10/2025

Description

Learn how to audit NuGet dependencies end to end with the Dot Net List Package Check Azure DevOps extension, from local inspection in Visual Studio and the CLI to automated validation in CI pipelines. In this video, I walk through how to inspect packages locally, compare that with command-line checks, and then move into Azure DevOps to configure the extension so your pipeline can detect vulnerable, deprecated, and outdated dependencies automatically. 0:00 - Introduction 0:10 - Description 1:16 - Sample Project 4:16 - NuGet 4:58 - Pipeline 5:49 - Marketplace 6:30 - Locally Installed 6:55 - Configuration 13:17 - Advanced 14:25 - Conclusion I also show why a custom dotnet list package approach in CI may not be enough on its own, and how a dedicated extension can help enforce package governance more consistently across builds. This walkthrough covers scope configuration, scan type, transitive package checks, build pass or fail behavior, and publishing the generated output so each run leaves behind reviewable audit results. If you manage .NET solutions in Azure DevOps and want better visibility into dependency health, this setup gives you a practical way to turn package auditing into a repeatable CI quality gate. #AzureDevOps #DotNet #NuGet Follow me on X: https://l.samayas.eu/jo3eaYEf3E?P=YT&V=39 Buy me a Coffee: https://l.samayas.eu/jX6xL7EWhd?P=YT&V=39 Studio Equipment Camera Sony Alpha ZV-E10 II: https://l.samayas.eu/k7y90TREl0?P=YT&V=39 Secondary Camera Obsbot Tail Air: https://l.samayas.eu/iFQu9WfmCw?P=YT&V=39 Elgato Prompter: https://l.samayas.eu/fHVrqqXtSc?P=YT&V=39 Microphone Rode Wireless GO II: https://l.samayas.eu/afBINjiBXN?P=YT&V=39