Story thread · 2 reports / 2 sources

Microsoft shortens NuGet API key lifetime to improve supply chain security

helpnetsecurity.com · 7dShare

Microsoft is reducing the lifetime of new NuGet.org API keys from 365 days to 30 days starting August 17, 2026, to improve the security of NuGet, its package repository for .NET developers. API keys created before August 17 will remain valid until November 1, after which developers will need to generate new keys or switch to NuGet Trusted Publishing. The change does not eliminate the risks associated with API keys, though it reduces the amount … More → The post Microsoft shortens NuGet API key lifetime to improve supply chain security appeared first on Help Net Security .

First report: NuGet Security: Microsoft shortens API key validity to 30 days — heise.de, 7d