From 71454cee1f5ef2662e9136de9d0c37211ab354ae Mon Sep 17 00:00:00 2001
From: "Tian L." <60599517+tian-lt@users.noreply.github.com>
Date: Wed, 19 Feb 2025 14:58:05 +0800
Subject: [PATCH] prefast and LKG compiler (#2301)

---
 .../pipelines/templates/build-single-architecture.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/build/pipelines/templates/build-single-architecture.yaml b/build/pipelines/templates/build-single-architecture.yaml
index 854d7ebf..0eb2ee0b 100644
--- a/build/pipelines/templates/build-single-architecture.yaml
+++ b/build/pipelines/templates/build-single-architecture.yaml
@@ -32,6 +32,8 @@ jobs:
     sdl:
       binskim:
         analyzeTargetGlob: +:f|$(Agent.BuildDirectory)\binskim\**\*
+      prefast:
+        enable: true
 
     outputs:
     - output: pipelineArtifact
@@ -43,6 +45,14 @@ jobs:
   - checkout: self
     fetchDepth: 1
 
+  - task: WinUndockNativeCompiler@1
+    displayName: Use LKG native compiler
+    inputs:
+      compilerPackageName: 'DevDiv.rel.LKG18.VCTools'
+      compilerPackageVersion: '19.42.3443710001+DevDivGIT.CI20250110.04-466784EE54DF2F302AD0CD6790031C954EF41DA23DA4415D73A76ADF260F2D21'
+      slnDirectory: $(Build.SourcesDirectory)\src
+      runPrefastDuring: Build
+
   - ${{ if eq(parameters.isOSSBuild, true) }}:
     - task: nuget-security-analysis@0
       displayName: Secure Supply Chain Analysis