From 1947351ade6e55a5568824a6bafcc54ca629ebd5 Mon Sep 17 00:00:00 2001
From: phil-allen-msft <phillipa@microsoft.com>
Date: Mon, 17 Mar 2025 20:48:43 -0700
Subject: [PATCH 1/3] Update TSA settings 17.8

---
 azure-pipelines-official.yml |  5 +++++
 eng/TSAConfig.gdntsa         | 12 +++++-------
 2 files changed, 10 insertions(+), 7 deletions(-)

diff --git a/azure-pipelines-official.yml b/azure-pipelines-official.yml
index 5cd7baa67b4..331b11354ca 100644
--- a/azure-pipelines-official.yml
+++ b/azure-pipelines-official.yml
@@ -84,6 +84,11 @@ extends:
         name: NetCore1ESPool-Svc-Internal
         image: 1es-windows-2022
         os: windows
+      policheck:
+        enabled: true
+      tsa:
+        enabled: true
+        configFile: '$(Build.SourcesDirectory)/eng/TSAConfig.gdntsa'
       sbom:
         enabled: false
     pool:
diff --git a/eng/TSAConfig.gdntsa b/eng/TSAConfig.gdntsa
index 5ab3f1d96d1..b0aa79142f7 100644
--- a/eng/TSAConfig.gdntsa
+++ b/eng/TSAConfig.gdntsa
@@ -1,17 +1,15 @@
-{
+{
     "codebaseName": "Razor-Tooling-GitHub",
     "notificationAliases": [
         "CoreRazorTooling@microsoft.com"
     ],
     "codebaseAdmins": [
-        "REDMOND\\manishj",
-        "REDMOND\\vaagrawa"
+        "REDMOND\\jaredpar",
+        "REDMOND\\phillipa"
     ],
     "instanceUrl": "https://devdiv.visualstudio.com",
     "projectName": "DevDiv",
-    "areaPath": "DevDiv\\NET Developer Experience\\Productivity\\Razor Tooling",
+    "areaPath": "DevDiv\\NET Developer Experience\\Razor Tooling",
     "iterationPath": "DevDiv",
-    "tools": [
-        "APIScan"
-    ]
+    "allTools": true
 }
\ No newline at end of file

From 6684ec11aff4eef048449e6139e73bfa39aebafb Mon Sep 17 00:00:00 2001
From: phil-allen-msft <phillipa@microsoft.com>
Date: Mon, 17 Mar 2025 20:56:22 -0700
Subject: [PATCH 2/3] Add binskim

---
 azure-pipelines-official.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/azure-pipelines-official.yml b/azure-pipelines-official.yml
index 331b11354ca..bb2107d8de6 100644
--- a/azure-pipelines-official.yml
+++ b/azure-pipelines-official.yml
@@ -84,6 +84,8 @@ extends:
         name: NetCore1ESPool-Svc-Internal
         image: 1es-windows-2022
         os: windows
+      binskim:
+        enabled: true
       policheck:
         enabled: true
       tsa:

From a33ce2e8aa625ef82bfc4d42b667799d82298dc2 Mon Sep 17 00:00:00 2001
From: Phil Allen <phillipa@microsoft.com>
Date: Mon, 24 Mar 2025 11:30:49 -0700
Subject: [PATCH 3/3] Remove explicit binskim configuration from pipeline

.... since it is on by default
---
 azure-pipelines-official.yml | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/azure-pipelines-official.yml b/azure-pipelines-official.yml
index bb2107d8de6..e2696db1aa1 100644
--- a/azure-pipelines-official.yml
+++ b/azure-pipelines-official.yml
@@ -1,4 +1,4 @@
-#
+#
 # See https://docs.microsoft.com/azure/devops/pipelines/yaml-schema for reference.
 #
 
@@ -84,8 +84,6 @@ extends:
         name: NetCore1ESPool-Svc-Internal
         image: 1es-windows-2022
         os: windows
-      binskim:
-        enabled: true
       policheck:
         enabled: true
       tsa: