From 4cd6d1cda48c21f58c8d06eb902f1cc9bda98ace Mon Sep 17 00:00:00 2001
From: Zachary Teutsch <zteutsch@microsoft.com>
Date: Tue, 11 Aug 2026 23:25:40 -0700
Subject: [PATCH] update nuget network policy

---
 .pipelines/release.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.pipelines/release.yml b/.pipelines/release.yml
index 85530421..ef755842 100644
--- a/.pipelines/release.yml
+++ b/.pipelines/release.yml
@@ -38,7 +38,8 @@ extends:
   template: v1/1ES.Official.PipelineTemplate.yml@1esPipelines
   parameters:
     settings:
-      networkIsolationPolicy: Permissive,CFSClean
+      # CFSClean blocks NuGet endpoints, including publishing to api.nuget.org.
+      networkIsolationPolicy: Permissive,CFSClean2
     sdl:
       policheck:
         enabled: true