Add AgentES Task to compliance.yml

.ado/compliance.yml

@@ -64,6 +64,22 @@ jobs:
       - template: templates/run-compliance-prebuild.yml
         parameters:
           complianceWarnOnly: ${{ parameters.complianceWarnOnly }}
+
+      - task: NuGetToolInstaller@1
+        inputs:
+          versionSpec: ">=5.8.0"
+
+      - task: NuGetAuthenticate@1
+
+      # AgentES Task (https://aka.ms/UES)
+      # Installs and runs the "Agent ES" tool, which scans the source code for banned file types.
+      - powershell: |
+          & nuget.exe install AgentES -FallbackSource https://microsoft.pkgs.visualstudio.com/_packaging/Undocked.Shell.Services/nuget/v3/index.json
+          $AgentESPath = (Get-ChildItem -Path AgentES* -Filter AgentES.exe -Recurse | %{$_.FullName})
+          & "$(AgentESPath)" $env:BUILD_SOURCESDIRECTORY -e:$env:BUILD_SOURCESDIRECTORY\.ado\config\AgentES.Exemptions.json -b
+        displayName: "⚖️ AgentES - Scan of Repository for UES Policy Violations"
+        workingDirectory: $(Agent.BuildDirectory)
+        continueOnError: ${{ parameters.complianceWarnOnly }}
 
       # Initialize CodeQL 3000 Task (https://aka.ms/codeql3000)
       # Performs static code analysis.