From 72a10f1c5871c4972db0e2509a061e9bd1304343 Mon Sep 17 00:00:00 2001 From: "Patrick Nelson (VS)" Date: Tue, 21 Jul 2026 13:00:26 -0700 Subject: [PATCH] Pin BinSkim task to latest 4.x engine instead of legacy 1.9.5 The BinSkim@4 task defaults to downloading Microsoft.CodeAnalysis.BinSkim 1.9.5, a deprecated engine. Add toolVersion: 'Latest' so the current 4.x BinSkim CLI is used. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 96c0e53b-3230-48d8-8d1c-996e1a41a1ac --- build/yaml/jobs/codeanalysis/binskim.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/build/yaml/jobs/codeanalysis/binskim.yaml b/build/yaml/jobs/codeanalysis/binskim.yaml index 3981c759..4a79d02f 100644 --- a/build/yaml/jobs/codeanalysis/binskim.yaml +++ b/build/yaml/jobs/codeanalysis/binskim.yaml @@ -35,6 +35,7 @@ jobs: AnalyzeTarget: '$(Build.ArtifactStagingDirectory)\binaries-windows-Release\**\*.dll;$(Build.ArtifactStagingDirectory)\binaries-windows-Release\**\*.exe;' AnalyzeVerbose: true AnalyzeHashes: true + toolVersion: 'Latest' continueOnError: true # Publish SecurityAnalysis Logs