Fix pipeline (#1404)

* Update Directory.Build.props * Update Directory.Build.props
microsoft · Dec 2, 2023 · b090c4f · b090c4f
1 parent 7116993
commit b090c4f
Showing 1 changed file with 20 additions and 1 deletion.
diff --git a/src/Samples/TestEmbedded/C++ Components/Directory.Build.props b/src/Samples/TestEmbedded/C++ Components/Directory.Build.props
@@ -1,2 +1,21 @@
 <Project ToolsVersion="14.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
-</Project>
+
+ <ItemDefinitionGroup>
+ <ClCompile>
+ <SDLCheck>true</SDLCheck>
+ <ControlFlowGuard Condition="'$(Configuration)'=='Release'">Guard</ControlFlowGuard>
+ <!-- /Qspectre Specifies compiler generation of instructions to mitigate certain Spectre variant 1 security vulnerabilities. BinSkim asks for this. -->
+ <!-- /ZH:SHA_256 Hash algorithm for file checksums in debug info -->
+ <AdditionalOptions>%(AdditionalOptions) /Qspectre /ZH:SHA_256</AdditionalOptions>
+ </ClCompile>
+ <Link Condition="'$(Configuration)'=='Release'">
+ <!-- /Brepro Enables deterministic output from the compiler toolchain -->
+ <!-- /PDBALTPATH Stops pdb's basepath from appearing in the Debug Directories of the image header -->
+ <!-- /CETCOMPAT enables Control-flow Enforcement Technology (CET) Shadow Stack mitigation.
+ BinSkim asks for this. /CETCOMPAT does not support arm64. -->
+ <AdditionalOptions Condition="'$(Platform)' == 'arm64'">%(AdditionalOptions) /Brepro /PDBALTPATH:$(TargetName).pdb</AdditionalOptions>
+ <AdditionalOptions Condition="'$(Platform)' != 'arm64'">%(AdditionalOptions) /Brepro /PDBALTPATH:$(TargetName).pdb /CETCOMPAT</AdditionalOptions>
+ </Link>
+ </ItemDefinitionGroup>
+
+</Project>