diff --git a/eng/pipelines/dotnet-sqlclient-signing-pipeline.yml b/eng/pipelines/dotnet-sqlclient-signing-pipeline.yml
index 32f8eae23f..ac760167ec 100644
--- a/eng/pipelines/dotnet-sqlclient-signing-pipeline.yml
+++ b/eng/pipelines/dotnet-sqlclient-signing-pipeline.yml
@@ -100,6 +100,10 @@ extends:
         enabled: true
         packageName: Microsoft.Data.SqlClient
         packageVersion: $(NugetPackageVersion)
+      policheck:
+        enabled: true
+        break: true # always break the build on policheck issues. You can disable it by setting to 'false'
+        exclusionsFile: $(REPOROOT)\.config\PolicheckExclusions.xml
       asyncSdl:
         enabled: false        
         credscan:
@@ -107,10 +111,6 @@ extends:
           suppressionsFile: $(REPOROOT)/.config/CredScanSuppressions.json
         binskim:
           enabled: true
-        policheck:
-          enabled: true
-          break: true # always break the build on policheck issues. You can disable it by setting to 'false'
-          optionsUEPATH: $(REPOROOT)\.config\PolicheckExclusions.xml
         armory:
           enabled: true
           break: true