From 2d6d07c1529c1ec5603351a4dd2cf622b84abce1 Mon Sep 17 00:00:00 2001
From: William Godbe <wigodbe@microsoft.com>
Date: Wed, 13 May 2020 10:59:22 -0700
Subject: [PATCH] [release/3.1] Move SDL validation to ringed release (#3201)

* Move SDL validation to ringed release

* Move SDL validation to ringed release

* Add back variables

* fixup
---
 azure-pipelines.yml     | 18 ------------------
 eng/sdl-tsa-vars.config | 11 +++++++++++
 2 files changed, 11 insertions(+), 18 deletions(-)
 create mode 100644 eng/sdl-tsa-vars.config

diff --git a/azure-pipelines.yml b/azure-pipelines.yml
index c89f07e2529..c9be15bf48a 100644
--- a/azure-pipelines.yml
+++ b/azure-pipelines.yml
@@ -20,10 +20,6 @@ variables:
     - name: _InternalRuntimeDownloadArgs
       value: ''
 
-  # used for post-build phases, internal builds only
-  - ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
-    - group: DotNet-AspNet-SDLValidation-Params
-
 # CI and PR triggers
 trigger:
   batch: true
@@ -354,17 +350,3 @@ stages:
       # Symbol validation isn't being very reliable lately. This should be enabled back
       # once this issue is resolved: https://github.com/dotnet/arcade/issues/2871
       enableSymbolValidation: false
-      # This is to enable SDL runs part of Post-Build Validation Stage
-      SDLValidationParameters:
-        enable: true
-        continueOnError: false
-        params: ' -SourceToolsList @("policheck","credscan")
-        -TsaInstanceURL $(_TsaInstanceURL)
-        -TsaProjectName $(_TsaProjectName)
-        -TsaNotificationEmail $(_TsaNotificationEmail)
-        -TsaCodebaseAdmin $(_TsaCodebaseAdmin)
-        -TsaBugAreaPath $(_TsaBugAreaPath)
-        -TsaIterationPath $(_TsaIterationPath)
-        -TsaRepositoryName "Extensions"
-        -TsaCodebaseName "Extensions"
-        -TsaPublish $True'
diff --git a/eng/sdl-tsa-vars.config b/eng/sdl-tsa-vars.config
new file mode 100644
index 00000000000..62bca0be51a
--- /dev/null
+++ b/eng/sdl-tsa-vars.config
@@ -0,0 +1,11 @@
+-SourceToolsList @("policheck","credscan")
+-TsaInstanceURL https://devdiv.visualstudio.com/
+-TsaProjectName DEVDIV
+-TsaNotificationEmail aspnetcore-build@microsoft.com
+-TsaCodebaseAdmin REDMOND\kevinpi
+-TsaBugAreaPath "DevDiv\ASP.NET Core"
+-TsaIterationPath DevDiv
+-TsaRepositoryName Extensions
+-TsaCodebaseName Extensions
+-TsaOnboard $True
+-TsaPublish $True