dotnet NugetAuditMode default is direct

Question

Hello!

I have installed dotnet 9 and Visual Studio Pro 17.12.3. But if I build project (with VS or dotnet build) with vulnerable transitive dependency it doesn't warn me. Only if I explicitly set NugetAuditMode to direct.

I have checked NuGet.config and locations. I didn't found any rewrites of NugetAuditMode. Maybe I can't find something?

My collegues doesn't have this issue.

dotnet info:

ПАКЕТ SDK ДЛЯ .NET:
 Version:           9.0.101
 Commit:            eedb237549
 Workload version:  9.0.100-manifests.4a280210
 MSBuild version:   17.12.12+1cce77968
Среда выполнения:
 OS Name:     Windows
 OS Version:  10.0.26100
 OS Platform: Windows
 RID:         win-x64
 Base Path:   C:\Program Files\dotnet\sdk\9.0.101\
Установленные рабочие нагрузки .NET:
 [android]
   Источник установки: SDK 9.0.100, VS 17.12.35527.113
   Версия манифеста:    35.0.7/9.0.100
   Путь к манифесту:       C:\Program Files\dotnet\sdk-manifests\9.0.100\microsoft.net.sdk.android\35.0.7\WorkloadManifest.json
   Тип установки:              Msi
 [aspire]
   Источник установки: SDK 9.0.100, VS 17.12.35527.113
   Версия манифеста:    8.2.2/8.0.100
   Путь к манифесту:       C:\Program Files\dotnet\sdk-manifests\8.0.100\microsoft.net.sdk.aspire\8.2.2\WorkloadManifest.json
   Тип установки:              Msi
 [ios]
   Источник установки: SDK 9.0.100, VS 17.12.35527.113
   Версия манифеста:    18.1.9163/9.0.100
   Путь к манифесту:       C:\Program Files\dotnet\sdk-manifests\9.0.100\microsoft.net.sdk.ios\18.1.9163\WorkloadManifest.json
   Тип установки:              Msi
 [maccatalyst]
   Источник установки: SDK 9.0.100, VS 17.12.35527.113
   Версия манифеста:    18.1.9163/9.0.100
   Путь к манифесту:       C:\Program Files\dotnet\sdk-manifests\9.0.100\microsoft.net.sdk.maccatalyst\18.1.9163\WorkloadManifest.json
   Тип установки:              Msi
 [macos]
   Источник установки: SDK 9.0.100, VS 17.12.35527.113
   Версия манифеста:    15.1.9163/9.0.100
   Путь к манифесту:       C:\Program Files\dotnet\sdk-manifests\9.0.100\microsoft.net.sdk.macos\15.1.9163\WorkloadManifest.json
   Тип установки:              Msi
 [maui-windows]
   Источник установки: SDK 9.0.100, VS 17.12.35527.113
   Версия манифеста:    9.0.0/9.0.100
   Путь к манифесту:       C:\Program Files\dotnet\sdk-manifests\9.0.100\microsoft.net.sdk.maui\9.0.0\WorkloadManifest.json
   Тип установки:              Msi
 [tvos]
   Источник установки: SDK 9.0.100, VS 17.12.35527.113
   Версия манифеста:    18.1.9163/9.0.100
   Путь к манифесту:       C:\Program Files\dotnet\sdk-manifests\9.0.100\microsoft.net.sdk.tvos\18.1.9163\WorkloadManifest.json
   Тип установки:              Msi
 [wasm-tools]
   Источник установки: SDK 9.0.100, VS 17.12.35527.113
   Версия манифеста:    9.0.0/9.0.100
   Путь к манифесту:       C:\Program Files\dotnet\sdk-manifests\9.0.100\microsoft.net.workload.mono.toolchain.current\9.0.0\WorkloadManifest.json
   Тип установки:              Msi
Настроено на использование loose manifests при установке новых манифестов.
Host:
  Version:      9.0.0
  Architecture: x64
  Commit:       9d5a6a9aa4
.NET SDKs installed:
  9.0.101 [C:\Program Files\dotnet\sdk]
.NET runtimes installed:
  Microsoft.AspNetCore.All 2.1.30 [C:\Program Files\dotnet\shared\Microsoft.AspNetCore.All]
  Microsoft.AspNetCore.App 2.1.30 [C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App]
  Microsoft.AspNetCore.App 6.0.36 [C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App]
  Microsoft.AspNetCore.App 7.0.20 [C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App]
  Microsoft.AspNetCore.App 8.0.11 [C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App]
  Microsoft.AspNetCore.App 9.0.0 [C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App]
  Microsoft.NETCore.App 2.1.30 [C:\Program Files\dotnet\shared\Microsoft.NETCore.App]
  Microsoft.NETCore.App 6.0.36 [C:\Program Files\dotnet\shared\Microsoft.NETCore.App]
  Microsoft.NETCore.App 7.0.20 [C:\Program Files\dotnet\shared\Microsoft.NETCore.App]
  Microsoft.NETCore.App 8.0.11 [C:\Program Files\dotnet\shared\Microsoft.NETCore.App]
  Microsoft.NETCore.App 9.0.0 [C:\Program Files\dotnet\shared\Microsoft.NETCore.App]
  Microsoft.WindowsDesktop.App 6.0.36 [C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App]
  Microsoft.WindowsDesktop.App 7.0.20 [C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App]
  Microsoft.WindowsDesktop.App 8.0.11 [C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App]
  Microsoft.WindowsDesktop.App 9.0.0 [C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App]
Other architectures found:
  x86   [C:\Program Files (x86)\dotnet]
    registered at [HKLM\SOFTWARE\dotnet\Setup\InstalledVersions\x86\InstallLocation]
Environment variables:
  Not set
global.json file:
  Not found
Learn more:
  https://aka.ms/dotnet/info
Download .NET:
  https://aka.ms/dotnet/download