Merge pull request #7606 from dibarbet/dev/dibarbet/signing_exclusion

exclude some debugger binaries from codesign validation

Author: dibarbet

azure-pipelines-official.yml

@@ -50,6 +50,10 @@ extends:
       tsa:
         enabled: true
         configFile: '$(Build.SourcesDirectory)/.config/guardian/TSAConfig.gdntsa'
+      codeSignValidation:
+        # VCTools dlls are signed with the Phone cert, which isn't accepted by the CodeSign policy.
+        # Can be removed once https://dev.azure.com/devdiv/DevDiv/_workitems/edit/2093995 is fixed.
+        additionalTargetsGlobPattern: '-|**\msdia140.dll;-|**\msvc*.dll;-|**\vcruntime*.dll'
     customBuildTags:
     - ES365AIMigrationTooling
     stages: