From e44f9f612dc253c7c52a355bc886c1d9f027575f Mon Sep 17 00:00:00 2001
From: Jiwon Lee <jiwonlee@microsoft.com>
Date: Thu, 1 Oct 2026 13:24:13 -0700
Subject: [PATCH] Enable DefaultDeny for compliance pipeline

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 84cf5b6c-1e49-4ae6-8c02-ea7576da28c7
---
 vsts-compliance.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/vsts-compliance.yml b/vsts-compliance.yml
index d24af5f..03bc096 100644
--- a/vsts-compliance.yml
+++ b/vsts-compliance.yml
@@ -38,7 +38,7 @@ extends:
   template: azure-pipelines/MicroBuild.1ES.Unofficial.yml@MicroBuildTemplate
   parameters:
     settings:
-      networkIsolationPolicy: Permissive,CFSClean,CFSClean2
+      networkIsolationPolicy: DefaultDeny
     pool:
       name: VSEngSS-MicroBuild2022-1ES
     sdl: