Switch to Security v1 template for compliance

azure-pipelines.yml

@@ -201,53 +201,22 @@ stages:
                 inputs:
                   versionSpec: $(NUGET_VERSION)
 
-    - stage: PoliCheck
-      displayName: 'Code Analysis'
-      dependsOn: windows
-      jobs:
-        - job: run_poli_check
-          displayName: 'Policheck And Credentials Compliance'
-          pool:
-            name: $(vs2019VmPool)
-            vmImage: $(vs2019VmImage)
-          timeoutInMinutes: 60
-          cancelTimeoutInMinutes: 5
-          steps:
-            - checkout: self
-
-            - template: security/policheck/v2.yml@xamarin-templates
-
-            - template: security/credscan/v3.yml@xamarin-templates
-              parameters:
-                suppressionsFile: $(System.DefaultWorkingDirectory)\build\automation\CredScanSuppressions.json
-
-            - task: securedevelopmentteam.vss-secure-development-tools.build-task-antimalware.AntiMalware@4
-              displayName: Run AntiMalware (Defender) Scan
-              inputs:
-                FileDirPath: $(System.DefaultWorkingDirectory)
-                EnableServices: true
-              condition: succeededOrFailed()
-
-            - task: securedevelopmentteam.vss-secure-development-tools.build-task-report.SdtReport@2
-              displayName: Create Security Analysis Report
-              inputs:
-                CredScan: true
-                PoliCheck: true
-              condition: succeededOrFailed()
-
-            - task: securedevelopmentteam.vss-secure-development-tools.build-task-publishsecurityanalysislogs.PublishSecurityAnalysisLogs@3
-              displayName: Publish Security Analysis Logs
-              inputs:
-                ArtifactName: CodeAnalysisLogs
-              condition: succeededOrFailed()
-
-            - task: securedevelopmentteam.vss-secure-development-tools.build-task-postanalysis.PostAnalysis@2
-              displayName: Fail Job if Security Issues are Detected
-              inputs:
-                CredScan: true
-                PoliCheck: true
-                GdnBreakGdnToolPoliCheckSeverity: 'Error'
-              condition: succeededOrFailed()
+    - template: security/full/v1.yml@xamarin-templates
+      parameters:
+        complianceTimeoutInMinutes: 480
+        stageDependsOn: windows
+        scanArtifacts: [ 'nuget', 'apiscan' ]
+        antiMalwareEnabled: true
+        binSkimEnabled: true
+        enableCodeInspector: true
+        credScanEnabled: true
+        credScanSuppressionFile: $(Build.SourcesDirectory)\build\automation\CredScanSuppressions.json
+        sourceGdnSuppressionFile: $(Build.SourcesDirectory)\build\automation\source.gdnsuppress
+        tsaConfigFile: $(Build.SourcesDirectory)\build\automation\tsaoptions-v2.json
+        apiScanEnabled: true
+        apiScanSoftwareName: 'Xamarin.Forms'
+        apiScanSoftwareVersionNum: '5.0.0'
+        apiScanPreserveLogsFolder: true
 
     - stage: sbom
       dependsOn: nuget_signing