Merge branch 'master' into feat/in-place-breakpoints

.ci/common-validation.yml

@@ -48,3 +48,33 @@ steps:
     testResultsFiles: '*-results.xml'
     searchFolder: '$(Build.ArtifactStagingDirectory)/test-results'
   condition: and(succeededOrFailed(), eq(${{ parameters.runTests }}, true))
+
+- task: ms.vss-governance-buildtask.governance-build-task-component-detection.ComponentGovernanceComponentDetection@0
+  displayName: 'Component Detection'
+  inputs:
+    ignoreDirectories: 'testdata,demos,.vscode-test'
+
+- ${{ if eq(parameters.name, 'Windows') }}:
+  - task: securedevelopmentteam.vss-secure-development-tools.build-task-uploadtotsa.TSAUpload@1
+    displayName: 'TSA upload to Codebase: vscode-js-debug_master Version: TsaV2'
+    inputs:
+      tsaVersion: TsaV2
+      codebase: NewOrUpdate
+      codeBaseName: 'vscode-js-debug_master'
+      notificationAlias: 'webdiag-extensions@microsoft.com'
+      instanceUrlForTsaV2: DEVDIV
+      projectNameDEVDIV: DevDiv
+      areaPath: 'DevDiv\TypeScript\HTML Experiences\Diagnostics\Debugger'
+      uploadAPIScan: false
+      uploadBinSkim: false
+      uploadFortifySCA: false
+      uploadFxCop: false
+      uploadModernCop: false
+      uploadPoliCheck: false
+      uploadPREfast: false
+      uploadRoslyn: false
+      uploadTSLint: false
+
+- ${{ if eq(parameters.name, 'Windows') }}:
+  - task: securedevelopmentteam.vss-secure-development-tools.build-task-publishsecurityanalysislogs.PublishSecurityAnalysisLogs@2
+    displayName: 'Publish Security Analysis Logs'