diff --git a/build/pipelines/templates/build-single-architecture.yaml b/build/pipelines/templates/build-single-architecture.yaml index 854d7ebf..0eb2ee0b 100644 --- a/build/pipelines/templates/build-single-architecture.yaml +++ b/build/pipelines/templates/build-single-architecture.yaml @@ -32,6 +32,8 @@ jobs: sdl: binskim: analyzeTargetGlob: +:f|$(Agent.BuildDirectory)\binskim\**\* + prefast: + enable: true outputs: - output: pipelineArtifact @@ -43,6 +45,14 @@ jobs: - checkout: self fetchDepth: 1 + - task: WinUndockNativeCompiler@1 + displayName: Use LKG native compiler + inputs: + compilerPackageName: 'DevDiv.rel.LKG18.VCTools' + compilerPackageVersion: '19.42.3443710001+DevDivGIT.CI20250110.04-466784EE54DF2F302AD0CD6790031C954EF41DA23DA4415D73A76ADF260F2D21' + slnDirectory: $(Build.SourcesDirectory)\src + runPrefastDuring: Build + - ${{ if eq(parameters.isOSSBuild, true) }}: - task: nuget-security-analysis@0 displayName: Secure Supply Chain Analysis