diff --git a/jobs/cg.yml b/jobs/cg.yml
index 1c79860..540d40a 100644
--- a/jobs/cg.yml
+++ b/jobs/cg.yml
@@ -41,6 +41,24 @@ extends:
       componentgovernance:
         ignoreDirectories: node_modules,dist,i18n
         alertWarningLevel: Medium
+      policheck:
+        enabled: true
+      tsa:
+        enabled: true
+        config:
+          tsaVersion: TsaV2
+          codebase: NewOrUpdate
+          codebaseName: vscode-makefile-tools
+          tsaStamp: $(Tsa.AdoProject)
+          tsaEnvironment: PROD
+          notificationAliases: $(Tsa.NotificationAliases)
+          codebaseAdmins: $(Tsa.CodebaseAdmins)
+          instanceUrl: $(Tsa.AdoOrg)
+          projectName: $(Tsa.AdoProject)
+          areaPath: $(Tsa.AreaPath)
+          iterationPath: $(Tsa.AdoProject)
+          allTools: true
+          repositoryName: vscode-makefile-tools
     customBuildTags:
       - ES365AIMigrationTooling
     stages: