From b5f20d8558e4e10052e282c177ae9f61ac4c2bea Mon Sep 17 00:00:00 2001
From: Ben McMorran <bemcmorr@microsoft.com>
Date: Thu, 23 Feb 2023 11:00:12 -0800
Subject: [PATCH 1/2] Real sign pre-release builds

Real signing was enabled faster than I expected.
---
 build/prerelease.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/build/prerelease.yml b/build/prerelease.yml
index 1b5d08b7..2cfb3896 100644
--- a/build/prerelease.yml
+++ b/build/prerelease.yml
@@ -15,8 +15,7 @@ schedules:
         - main
 
 variables:
-  # TODO: change this to real sign after getting signing approval.
-  SignType: test
+  SignType: real
 
 jobs:
   - template: ./build.yml

From a304452b74a1f47885f968e227cecefd88572d85 Mon Sep 17 00:00:00 2001
From: Ben McMorran <bemcmorr@microsoft.com>
Date: Thu, 23 Feb 2023 11:43:21 -0800
Subject: [PATCH 2/2] Use config file for TSAUpload v2

---
 build/build.yml  | 19 ++-----------------
 build/tsa.gdntsa |  9 +++++++++
 2 files changed, 11 insertions(+), 17 deletions(-)
 create mode 100644 build/tsa.gdntsa

diff --git a/build/build.yml b/build/build.yml
index 1da17150..a2e82192 100644
--- a/build/build.yml
+++ b/build/build.yml
@@ -143,23 +143,8 @@ jobs:
       - task: TSAUpload@2
         displayName: Upload logs to TSA
         inputs:
-          tsaVersion: TsaV2
-          codebase: NewOrUpdate
-          codeBaseName: vscode-arduino
-          notificationAlias: embeddeddev@microsoft.com
-          instanceUrlForTsaV2: DEVDIV
-          projectNameDEVDIV: DevDiv
-          areaPath: DevDiv\Cpp Developer Experience\Cross Platform\Embedded
-          iterationPath: DevDiv
-          # To avoid spurious warnings about missing logs, explicitly declare what we don't upload.
-          uploadAPIScan: false
-          uploadBinSkim: false
-          uploadFortifySCA: false
-          uploadFxCop: false
-          uploadModernCop: false
-          uploadPREfast: false
-          uploadRoslyn: false
-          uploadTSLint: false
+          GdnPublishTsaOnboard: true
+          GdnPublishTsaConfigFile: $(Build.SourcesDirectory)\build\tsa.gdntsa
         # Don't open bugs for PR builds
         condition: ne(variables['Build.Reason'], 'PullRequest')
 
diff --git a/build/tsa.gdntsa b/build/tsa.gdntsa
new file mode 100644
index 00000000..5b22390f
--- /dev/null
+++ b/build/tsa.gdntsa
@@ -0,0 +1,9 @@
+{
+    "codebaseName": "vscode-arduino",
+    "notificationAliases": ["embeddeddev@microsoft.com"],
+    "instanceUrl": "https://devdiv.visualstudio.com",
+    "projectName": "DevDiv",
+    "areaPath": "DevDiv\\Cpp Developer Experience\\Cross Platform\\Embedded",
+    "iterationPath": "DevDiv",
+    "allTools": true
+}
\ No newline at end of file