From 18d828e5d596e56b516fac7baa53e4b32cf087be Mon Sep 17 00:00:00 2001
From: Raymond Zhao <7199958+rzhao271@users.noreply.github.com>
Date: Mon, 3 Nov 2025 19:45:30 -0800
Subject: [PATCH] chore: suppress node warnings (#274905)

* chore: suppress node CFG warnings

* Add lines from gdnsuppress
---
 .config/guardian/{.gdnbaselines => .gdnsuppress}    | 5 +++--
 build/azure-pipelines/win32/product-build-win32.yml | 3 +++
 2 files changed, 6 insertions(+), 2 deletions(-)
 rename .config/guardian/{.gdnbaselines => .gdnsuppress} (95%)

diff --git a/.config/guardian/.gdnbaselines b/.config/guardian/.gdnsuppress
similarity index 95%
rename from .config/guardian/.gdnbaselines
rename to .config/guardian/.gdnsuppress
index 9408d050c9a..3ac8361e5fc 100644
--- a/.config/guardian/.gdnbaselines
+++ b/.config/guardian/.gdnsuppress
@@ -1,9 +1,10 @@
 {
+  "hydrated": true,
   "properties": {
-    "helpUri": "https://eng.ms/docs/microsoft-security/security/azure-security/cloudai-security-fundamentals-engineering/security-integration/guardian-wiki/microsoft-guardian/general/baselines"
+    "helpUri": "https://eng.ms/docs/microsoft-security/security/azure-security/cloudai-security-fundamentals-engineering/security-integration/guardian-wiki/microsoft-guardian/general/suppressions"
   },
   "version": "1.0.0",
-  "baselines": {
+  "suppressionSets": {
     "default": {
       "name": "default",
       "createdDate": "2025-01-28 06:29:05Z",
diff --git a/build/azure-pipelines/win32/product-build-win32.yml b/build/azure-pipelines/win32/product-build-win32.yml
index b60e66eaae4..3a91d3cdd97 100644
--- a/build/azure-pipelines/win32/product-build-win32.yml
+++ b/build/azure-pipelines/win32/product-build-win32.yml
@@ -81,6 +81,9 @@ jobs:
           sbomBuildDropPath: $(Agent.BuildDirectory)/vscode-server-win32-$(VSCODE_ARCH)-web
           sbomPackageName: "VS Code Windows $(VSCODE_ARCH) Web"
           sbomPackageVersion: $(Build.SourceVersion)
+      sdl:
+        suppression:
+          suppressionFile: $(Build.SourcesDirectory)\.config\guardian\.gdnsuppress
     steps:
       - template: ./steps/product-build-win32-compile.yml@self
         parameters: