From e23ba265bed5563cc03627e139fe0330d3d59f88 Mon Sep 17 00:00:00 2001
From: "Gavin Barron (from Dev Box)" <gavinbarron@microsoft.com>
Date: Fri, 17 Jul 2026 12:59:26 -0700
Subject: [PATCH] Route NuGet restore through the CFS central package feed

Adds NuGetAuthenticate@1 and a generated nuget.config pointing at the GraphDeveloperExperiences_Public Azure Artifacts feed so the CI build restores packages from the authenticated central feed (network isolation / CFS compliance).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 9bd6fe40-0d69-4e3f-927b-8628c0ab6d34
---
 .azure-pipelines/ci-build.yml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/.azure-pipelines/ci-build.yml b/.azure-pipelines/ci-build.yml
index 836c94d2..a300e4f3 100644
--- a/.azure-pipelines/ci-build.yml
+++ b/.azure-pipelines/ci-build.yml
@@ -74,6 +74,20 @@ extends:
               checkLatest: true
 
           # Build the Product project
+          - task: NuGetAuthenticate@1
+            displayName: 'Authenticate to Azure Artifacts'
+
+          - pwsh: |
+              @"
+              <?xml version="1.0" encoding="utf-8"?>
+              <configuration>
+                <packageSources>
+                  <clear />
+                  <add key="GraphDeveloperExperiences_Public" value="https://microsoftgraph.pkgs.visualstudio.com/0985d294-5762-4bc2-a565-161ef349ca3e/_packaging/GraphDeveloperExperiences_Public/nuget/v3/index.json" />
+                </packageSources>
+              </configuration>
+              "@ | Set-Content -Path "$(Build.SourcesDirectory)/nuget.config" -Encoding UTF8
+            displayName: 'Create nuget.config (central feed)'
           - task: DotNetCoreCLI@2
             displayName: 'build'
             inputs: