What

Adds autobaseline to the sdl: config in eng/pipelines/templates/1es-redirect.yml:

sdl:
  autobaseline:
    enableForGitHub: true
    isEnabledForAllTools: true

Why

Addresses the recurring 1ES PT warning:

Your pipeline is not yet baselined for any existing SDL violations and running SDL tools in no-break mode. Once your YAMLs are checked in, run your pipeline on the default branch of your repo to trigger automatic generation of baselines by 1ES PT.

• enableForGitHub: true is required for autobaselining to engage on a GitHub-hosted repo.
• isEnabledForAllTools: true baselines all SDL tools (credscan, psscriptanalyzer, etc.).

The .gdnbaselines baseline is generated automatically on the next pipeline run on main, after which the no-break-mode warning clears.

Out of scope

• Branch-validation warning — inherent 1ES limitation for GitHub repos; not suppressible.
• Component Governance alerts — tracked separately.