diff --git a/.config/tsaoptions.json b/.config/tsaoptions.json
new file mode 100644
index 00000000..815125de
--- /dev/null
+++ b/.config/tsaoptions.json
@@ -0,0 +1,11 @@
+{
+    "instanceUrl": "https://microsoft.visualstudio.com",
+    "projectName": "OS",
+    "areaPath": "OS\\Windows Client and Services\\WinPD\\DFX-Developer Fundamentals and Experiences\\DEFT\\InstaDev",
+    "iterationPath": "OS\\Future",
+    "notificationAliases": [
+        "instadev@microsoft.com"
+    ],
+    "ignoreBranchName": true,
+    "repositoryName": "winget-create"
+}
diff --git a/.github/actions/spelling/allow.txt b/.github/actions/spelling/allow.txt
index c98d3d75..ad50d6cf 100644
--- a/.github/actions/spelling/allow.txt
+++ b/.github/actions/spelling/allow.txt
@@ -117,5 +117,7 @@ xffff
 yml
 zhuangtongfa
 DWM
+tsa
+tsaoptions
 tzautoupdate
 Usb
diff --git a/pipelines/azure-pipelines.release.yml b/pipelines/azure-pipelines.release.yml
index e3d5012c..7aaa93c6 100644
--- a/pipelines/azure-pipelines.release.yml
+++ b/pipelines/azure-pipelines.release.yml
@@ -32,6 +32,12 @@ resources:
 extends:
   template: v2/Microsoft.Official.yml@templates
   parameters:
+    globalSdl:
+      tsa:
+        enabled: true
+        configFile: $(Build.SourcesDirectory)\.config\tsaoptions.json
+        onboard: false
+
     featureFlags:
       WindowsHostVersion:
         Version: 2022