diff --git a/azure-pipelines.yml b/azure-pipelines.yml
index 0bafbd80..00aaec0c 100644
--- a/azure-pipelines.yml
+++ b/azure-pipelines.yml
@@ -42,6 +42,13 @@ extends:
         name: $(DncEngInternalBuildPool)
         image: 1es-windows-2022
         os: windows
+      sbom:
+        enabled: false
+      policheck:
+          enabled: true
+      tsa:
+        enabled: true
+        configFile: '$(Build.SourcesDirectory)/eng/TSAConfig.gdntsa'
     customBuildTags:
     - ES365AIMigrationTooling
     stages:
diff --git a/eng/TSAConfig.gdntsa b/eng/TSAConfig.gdntsa
new file mode 100644
index 00000000..a6b1e963
--- /dev/null
+++ b/eng/TSAConfig.gdntsa
@@ -0,0 +1,15 @@
+{
+    "codebaseName": "SourceLink-GitHub",
+    "notificationAliases": [
+        "mlinfraswat@microsoft.com"
+    ],
+    "codebaseAdmins": [
+        "REDMOND\\tomat",
+        "REDMOND\\phillipa"
+    ],
+    "instanceUrl": "https://devdiv.visualstudio.com",
+    "projectName": "DevDiv",
+    "areaPath": "DevDiv\\NET Developer Experience\\Debugger and Interactive",
+    "iterationPath": "DevDiv",
+    "allTools": true
+}