Microsoft defender is alerting for vulnerable version of nuget package in Azure Function's ".azurefunctions/function.deps.json" file"

Pratim Das, Partha C 306 Reputation points
2024-05-30T05:26:36.4033333+00:00

Hi Champs,

I'm facing a typical problem with my function app and MS defender for cloud.

Defender is raising issues for my deployed function(written in c#) as:

User's image

Even after installing latest nuget package, "function.deps.json" file is not referring to the latest versions.

I can see another <function name>.deps.json file outside the .azurefunctions folder which is referring to latest packages.

If I delete ".azurefunctions" folder, function stops execution.

My challenge is to to update the deps.json file inside the folder, other wise defender will keep on alerting which is not acceptable.

This deps.json file is autogenerated so how I can change any configuration so that it refer to the latest version of the package?

This issue is stopping us to live. Early response will be of great help.

Regards,

Partha

Azure Functions
Azure Functions
An Azure service that provides an event-driven serverless compute platform.
4,566 questions
Azure
Azure
A cloud computing platform and infrastructure for building, deploying and managing applications and services through a worldwide network of Microsoft-managed datacenters.
1,058 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,250 questions
0 comments No comments
{count} votes