From c703ef3a2ba83d2bfac6ccce43c8c0886ca092a0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Alexander=20K=C3=B6plinger?= <alex.koeplinger@outlook.com>
Date: Mon, 16 Sep 2024 17:37:03 +0200
Subject: [PATCH] Enable Policheck

---
 .config/PoliCheckExclusions.xml | 5 +++++
 eng/azure-pipelines.yml         | 3 +++
 2 files changed, 8 insertions(+)
 create mode 100644 .config/PoliCheckExclusions.xml

diff --git a/.config/PoliCheckExclusions.xml b/.config/PoliCheckExclusions.xml
new file mode 100644
index 0000000000000..280812764b952
--- /dev/null
+++ b/.config/PoliCheckExclusions.xml
@@ -0,0 +1,5 @@
+<PoliCheckExclusions>
+  <!-- https://eng.ms/docs/experiences-devices/customer-success-engineering/global/language-as-a-service/validationservices/policheck-for-microsoft/policheckclient/features/features#false-positive-management -->
+  <!-- exclude upstream sources -->
+  <Exclusion Type="FolderPathFull">bolt|clang|clang-tools-extra|compiler-rt|cross-project-tests|flang|libc|libcxx|lld|lldb|llvm|mlir|openmp|polly</Exclusion>
+</PoliCheckExclusions>
diff --git a/eng/azure-pipelines.yml b/eng/azure-pipelines.yml
index d5fb46bd7f72a..c0b9270f167fb 100644
--- a/eng/azure-pipelines.yml
+++ b/eng/azure-pipelines.yml
@@ -83,6 +83,9 @@ extends:
   template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
   parameters:
     sdl:
+      policheck:
+        enabled: true
+        exclusionsFile: $(Build.SourcesDirectory)\.config\PoliCheckExclusions.xml
       tsa:
         enabled: true
       codeql: