Enable Policheck

dotnet · Sep 19, 2024 · c703ef3 · c703ef3
1 parent 688e008
commit c703ef3
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/.config/PoliCheckExclusions.xml b/.config/PoliCheckExclusions.xml
@@ -0,0 +1,5 @@
+<PoliCheckExclusions>
+  <!-- https://eng.ms/docs/experiences-devices/customer-success-engineering/global/language-as-a-service/validationservices/policheck-for-microsoft/policheckclient/features/features#false-positive-management -->
+  <!-- exclude upstream sources -->
+  <Exclusion Type="FolderPathFull">bolt|clang|clang-tools-extra|compiler-rt|cross-project-tests|flang|libc|libcxx|lld|lldb|llvm|mlir|openmp|polly</Exclusion>
+</PoliCheckExclusions>
diff --git a/eng/azure-pipelines.yml b/eng/azure-pipelines.yml
@@ -83,6 +83,9 @@ extends:
   template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
   parameters:
     sdl:
+      policheck:
+        enabled: true
+        exclusionsFile: $(Build.SourcesDirectory)\.config\PoliCheckExclusions.xml
       tsa:
         enabled: true
       codeql: