Integrate TSA into the official build

Author: jeffhandley

.config/tsaoptions.json

@@ -0,0 +1,11 @@
+{
+    "instanceUrl": "https://devdiv.visualstudio.com/",
+    "template": "TFSDEVDIV",
+    "projectName": "DEVDIV",
+    "areaPath": "DevDiv\\NET Libraries",
+    "iterationPath": "DevDiv",
+    "notificationAliases": [ "[email protected]" ],
+    "repositoryName":"command-line-api",
+    "codebaseName": "command-line-api",
+    "serviceTreeId": "7a9b52f6-7805-416c-9390-343168c0cdb3"
+}

.vsts-ci-official.yml

@@ -5,13 +5,20 @@ variables:
     value: .NETCore
   - name: Codeql.Enabled
     value: true
+  # CodeQL3000 needs this plumbed along as a variable to enable TSA.
+  - name: Codeql.TSAEnabled
+    value: true
+  - name: Codeql.TSAOptionsPath
+    value: '$(Build.SourcesDirectory)/.config/tsaoptions.json'
 
 # CI and PR triggers
 trigger:
   batch: true
   branches:
     include:
     - main
+    - internal/release/*
+    - validation/*
 
 pr:
   autoCancel: false
@@ -35,6 +42,14 @@ extends:
       os: windows
     customBuildTags:
     - ES365AIMigrationTooling
+    sdl:
+      binskim:
+        scanOutputDirectoryOnly: true
+        preReleaseVersion: '4.3.1'
+      policheck:
+        enabled: true
+      tsa:
+        enabled: true
     stages:
     - stage: build
       displayName: Build and Test