[release/3.1] Move SDL validation to ringed release (#1823)

* Move SDL validation to ringed release

* Remove unneeded stuff

* Add back variables

* fixup

azure-pipelines.yml

@@ -24,10 +24,6 @@ variables:
   - name: _InternalRuntimeDownloadArgs
     value: ''
 
-# used for post-build phases, internal builds only
-- ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
-  - group: DotNet-AspNet-SDLValidation-Params
-
 trigger:
   batch: true
   branches:
@@ -356,17 +352,3 @@ stages:
       # See https://github.com/dotnet/arcade/issues/2871
       enableSymbolValidation: false
       publishInstallersAndChecksums: true
-      # This is to enable SDL runs part of Post-Build Validation Stage
-      SDLValidationParameters:
-        enable: true
-        continueOnError: false
-        params: ' -SourceToolsList @("policheck","credscan")
-        -TsaInstanceURL $(_TsaInstanceURL)
-        -TsaProjectName $(_TsaProjectName)
-        -TsaNotificationEmail $(_TsaNotificationEmail)
-        -TsaCodebaseAdmin $(_TsaCodebaseAdmin)
-        -TsaBugAreaPath $(_TsaBugAreaPath)
-        -TsaIterationPath $(_TsaIterationPath)
-        -TsaRepositoryName "AspNetCore-Tooling"
-        -TsaCodebaseName "AspNetCore-Tooling"
-        -TsaPublish $True'

eng/sdl-tsa-vars.config

@@ -0,0 +1,11 @@
+-SourceToolsList @("policheck","credscan")
+-TsaInstanceURL https://devdiv.visualstudio.com/
+-TsaProjectName DEVDIV
+-TsaNotificationEmail aspnetcore-build@microsoft.com
+-TsaCodebaseAdmin REDMOND\kevinpi
+-TsaBugAreaPath "DevDiv\ASP.NET Core"
+-TsaIterationPath DevDiv
+-TsaRepositoryName AspNetCore-Tooling
+-TsaCodebaseName AspNetCore-Tooling
+-TsaOnboard $True
+-TsaPublish $True