diff --git a/eng/pipelines/common/templates/template1es.yml b/eng/pipelines/common/templates/template1es.yml
index 9082d5eacb163..9a79faf01d92a 100644
--- a/eng/pipelines/common/templates/template1es.yml
+++ b/eng/pipelines/common/templates/template1es.yml
@@ -26,6 +26,10 @@ extends:
         justificationForDisabling: 'CodeQL is run on the runtime-codeql pipeline'
       credscan:
         suppressionsFile: $(Build.SourcesDirectory)/.config/CredScanSuppressions.json
+      policheck:
+        enabled: true
+      tsa:
+        enabled: true
     pool:
       name: $(DncEngInternalBuildPool)
       image: 1es-windows-2022