Skip to content

Enable CFSClean2 policy for interactive-ci pipeline#4202

Open
mmitche wants to merge 1 commit intodotnet:mainfrom
mmitche:enable-cfsclean-interactive-ci
Open

Enable CFSClean2 policy for interactive-ci pipeline#4202
mmitche wants to merge 1 commit intodotnet:mainfrom
mmitche:enable-cfsclean-interactive-ci

Conversation

@mmitche
Copy link
Member

@mmitche mmitche commented Mar 18, 2026

Enable CFSClean2 policy for interactive-ci pipeline

Change

Add CFSClean2 to the
etworkIsolationPolicy in �zure-pipelines-official.yml:
Permissive,CFSClean -> Permissive,CFSClean,CFSClean2

Background

The interactive-ci pipeline (definition 743) has an active CFSClean2 compliance violation:

  • Policy: CFSClean2
  • Organization: dnceng / internal

Validation

  • Test build: Build 2929143
  • Windows_NT job: ✅ Passed (the job with the CFSClean2 violation)
  • Linux job: ❌ Failed (pre-existing test failure, same as baseline build 2924266 on main)
  • SDL Sources Analysis: ✅ Passed
  • Network Isolation Start/Stop: ✅ Both succeeded

The test build results are identical to the latest main branch build — no regressions introduced.

Reference

Pattern follows dotnet/arcade@73f3365

Add CFSClean2 to the networkIsolationPolicy settings to address
compliance violation from msedge.exe accessing cdnjs.cloudflare.com
during the Windows_NT job.

Policy: Permissive,CFSClean -> Permissive,CFSClean,CFSClean2
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant