Merge pull request #7281 from dotnet/dev/jorobich/enable-policheck

Enable SDL policheck tool

Author: JoeRobich

.config/guardian/TSAConfig.gdntsa

@@ -0,0 +1,15 @@
+{
+    "codebaseName": "VSCode-CSharp-GitHub",
+    "notificationAliases": [
+        "[email protected]"
+    ],
+    "codebaseAdmins": [
+        "REDMOND\\phillipa",
+        "REDMOND\\arkalyan"
+    ],
+    "instanceUrl": "https://devdiv.visualstudio.com",
+    "projectName": "DevDiv",
+    "areaPath": "DevDiv\\NET Developer Experience\\CSharp and VB IDE",
+    "iterationPath": "DevDiv",
+    "allTools": true
+}

azure-pipelines-official.yml

@@ -33,11 +33,21 @@ extends:
       name: netcore1espool-internal
       image: 1es-windows-2022
       os: windows
+    sdl:
+      sourceAnalysisPool:
+        name: netcore1espool-internal
+        image: 1es-windows-2022
+        os: windows
+      policheck:
+        enabled: true
+      tsa:
+        enabled: true
+        configFile: '$(Build.SourcesDirectory)/.config/guardian/TSAConfig.gdntsa'
     customBuildTags:
     - ES365AIMigrationTooling
     stages:
     - template: /azure-pipelines/build-all.yml@self
       parameters:
         versionNumberOverride: ${{ parameters.versionNumberOverride }}
         isOfficial: true
-        channel: ${{ parameters.channel }}
+        channel: ${{ parameters.channel }}