diff --git a/build/azure-pipelines/.gdntsa b/build/azure-pipelines/.gdntsa
index a9d98fe01f0..d3b1b7c6d86 100644
--- a/build/azure-pipelines/.gdntsa
+++ b/build/azure-pipelines/.gdntsa
@@ -6,7 +6,7 @@
     ],
     "codebaseAdmins": [
         "REDMOND\\stbatt",
-        "REDMOND\\monacotools",
+        "REDMOND\\monacotools"
     ],
     "instanceUrl": "https://msazure.visualstudio.com/defaultcollection",
     "projectName": "One",
diff --git a/build/azure-pipelines/sdl-scan.yml b/build/azure-pipelines/sdl-scan.yml
index 7ec57bdc1c6..b3c2a12b02b 100644
--- a/build/azure-pipelines/sdl-scan.yml
+++ b/build/azure-pipelines/sdl-scan.yml
@@ -34,6 +34,8 @@ variables:
     value: true
   - name: Codeql.TSAEnabled
     value: true
+  - name: Codeql.TSAOptionsPath
+    value: '$(Build.SourcesDirectory)\build\azure-pipelines\.gdntsa'
 
 stages:
   - stage: Windows