Enable Policheck

akoeplinger · radekdoulik · commit c703ef3a2ba8 · 2024-09-19T18:31:41.000+02:00
diff --git a/.config/PoliCheckExclusions.xml b/.config/PoliCheckExclusions.xml
@@ -0,0 +1,5 @@
+<PoliCheckExclusions>
+  <!-- https://eng.ms/docs/experiences-devices/customer-success-engineering/global/language-as-a-service/validationservices/policheck-for-microsoft/policheckclient/features/features#false-positive-management -->
+  <!-- exclude upstream sources -->
+  <Exclusion Type="FolderPathFull">bolt|clang|clang-tools-extra|compiler-rt|cross-project-tests|flang|libc|libcxx|lld|lldb|llvm|mlir|openmp|polly</Exclusion>
+</PoliCheckExclusions>
diff --git a/eng/azure-pipelines.yml b/eng/azure-pipelines.yml
@@ -83,6 +83,9 @@ extends:
   template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
   parameters:
     sdl:
+      policheck:
+        enabled: true
+        exclusionsFile: $(Build.SourcesDirectory)\.config\PoliCheckExclusions.xml
       tsa:
         enabled: true
       codeql:
