Enable CFSClean* policies for dotnet-maui pipeline

[mmitche]

Adds CFSClean and CFSClean2 network isolation policies.

[github-actions]

🚀 Dogfood this PR with:

⚠️ WARNING: Do not do this without first carefully reviewing the code of this PR to satisfy yourself it is safe.

curl -fsSL https://raw.githubusercontent.com/dotnet/maui/main/eng/scripts/get-maui-pr.sh | bash -s -- 34540

Or

• Run remotely in PowerShell:

iex "& { $(irm https://raw.githubusercontent.com/dotnet/maui/main/eng/scripts/get-maui-pr.ps1) } 34540"

[dotnet-policy-service]

Hey there @@mmitche! Thank you so much for your PR! Someone from the team will get assigned to your PR shortly and we'll get it reviewed.

[Copilot]

Pull request overview

Enables additional network isolation policies for the official Azure DevOps pipeline configuration in dotnet-maui, by updating the 1ES pipeline template settings.

Changes:

• Adds a settings block under extends.parameters in the official CI pipeline.
• Configures networkIsolationPolicy to include CFSClean and CFSClean2 (in addition to Permissive).

---

You can also share your feedback on Copilot code review. Take the survey.

[mmitche]

https://dev.azure.com/dnceng/internal/_build/results?buildId=2930701&view=results

[rmarinho]

/azp run

[azure-pipelines]

Azure Pipelines successfully started running 3 pipeline(s).

[rmarinho]

Seems there s already a CFSClean3 ?

[mmitche]

Seems there s already a CFSClean3 ?

It appears so, though it's not active yet? It covers some additional endpoints.

[mmitche]

https://eng.ms/docs/microsoft-ai/webxt/feed-verticals/start-experiences/fv-live-site/sfi-executor-centric-wiki/skills/security/mdp-cfs-security-change/skill

[mmitche]

The official build is green there. Merge as you wish.