From 3fdbbc0aa0f79c3c1636e3c2e213c5d87e655913 Mon Sep 17 00:00:00 2001
From: William Godbe <wigodbe@microsoft.com>
Date: Wed, 21 Jan 2026 12:03:42 -0800
Subject: [PATCH] Set network isolation policy for extensions-ci

---
 azure-pipelines.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/azure-pipelines.yml b/azure-pipelines.yml
index 7ec53a25921..dd7e6ec356f 100644
--- a/azure-pipelines.yml
+++ b/azure-pipelines.yml
@@ -146,6 +146,8 @@ resources:
 extends:
   template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
   parameters:
+    settings:
+      networkIsolationPolicy: Permissive,CFSClean2
     featureFlags:
       binskimScanAllExtensions: true
     sdl: