Fix and enforce CFS violations (#5638)

Author: hoyosjs

eng/pipelines/prepare-release.yml

@@ -33,13 +33,11 @@ stages:
           condition: succeeded()
     variables:
     - ${{ if and(eq(parameters.isOfficialBuild, true), or(startsWith(variables['Build.SourceBranch'], 'refs/heads/release/'), startsWith(variables['Build.SourceBranch'], 'refs/heads/internal/release/'))) }}:
-
       - group: DotNet-Diagnostics-Storage
       - group: Release-Pipeline
     steps:
     - ${{ if or(eq(parameters.isOfficialBuild, false), eq(variables['Build.SourceBranch'], 'refs/heads/main')) }}:
-      - script: '$(Build.Repository.LocalPath)\dotnet.cmd build $(Build.Repository.LocalPath)\eng\release\DiagnosticsReleaseTool\DiagnosticsReleaseTool.csproj -c Release /bl'
-        workingDirectory: '$(System.ArtifactsDirectory)'
+      - script: '$(Build.Repository.LocalPath)\dotnet.cmd build $(Build.Repository.LocalPath)\eng\release\DiagnosticsReleaseTool\DiagnosticsReleaseTool.csproj -c Release'
         displayName: 'Build Manifest generation and asset publishing tool'
     - ${{ elseif and(eq(parameters.isOfficialBuild, true), or(startsWith(variables['Build.SourceBranch'], 'refs/heads/release/'), startsWith(variables['Build.SourceBranch'], 'refs/heads/internal/release/'))) }}:
       - task: UseDotNet@2

eng/pipelines/templateInternal.yml

@@ -29,6 +29,9 @@ extends:
         enabled: true
       tsa:
         enabled: true
+    settings:
+      # Do not add CFSClean2 yet - microbuild needs some endpoints behind it.
+      networkIsolationPolicy: Permissive,CFSClean
     featureFlags:
       autoBaseline: true