Merge branch 'add-nuget-lock-file-to-gemnasium-job' into 'master'

Add Dependency Scanning support for NuGet lock files

See merge request gitlab-org/gitlab!37553

changelogs/unreleased/225219-add-nuget-lock-file-to-gemnasium-job.yml

+---
+title: "Add NuGet lock files support to Dependency Scanning CI template"
+merge_request: 37553
+author:
+type: added

ee/spec/lib/gitlab/ci/templates/dependency_scanning_gitlab_ci_yaml_spec.rb

@@ -67,6 +67,7 @@ RSpec.describe 'Dependency-Scanning.gitlab-ci.yml' do
             'Javascript yarn.lock'           | { 'yarn.lock' => '' }                     | %w(gemnasium-dependency_scanning)
             'Javascript npm-shrinkwrap.json' | { 'npm-shrinkwrap.json' => '' }           | %w(gemnasium-dependency_scanning)
             'Multiple languages'             | { 'pom.xml' => '', 'package.json' => '' } | %w(gemnasium-maven-dependency_scanning retire-js-dependency_scanning)
+            'NuGet'                          | { 'packages.lock.json' => '' }            | %w(gemnasium-dependency_scanning)
             'PHP'                            | { 'composer.lock' => '' }                 | %w(gemnasium-dependency_scanning)
             'Python requirements.txt'        | { 'requirements.txt' => '' }              | %w(gemnasium-python-dependency_scanning)
             'Python requirements.pip'        | { 'requirements.pip' => '' }              | %w(gemnasium-python-dependency_scanning)

lib/gitlab/ci/templates/Security/Dependency-Scanning.gitlab-ci.yml

@@ -111,6 +111,7 @@ gemnasium-dependency_scanning:
         - '{npm-shrinkwrap.json,*/npm-shrinkwrap.json,*/*/npm-shrinkwrap.json}'
         - '{package-lock.json,*/package-lock.json,*/*/package-lock.json}'
         - '{yarn.lock,*/yarn.lock,*/*/yarn.lock}'
+        - '{packages.lock.json,*/packages.lock.json,*/*/packages.lock.json}'
 
 gemnasium-maven-dependency_scanning:
   extends: .ds-analyzer