Enforce CFSClean (#48082)

Author: chidozieononiwu

eng/pipelines/templates/stages/1es-redirect.yml

@@ -36,7 +36,7 @@ extends:
         - 1ES.PT.Tag-refs/tags/canary
     settings:
       skipBuildTagsForGitHubPullRequests: true
-      networkIsolationPolicy: Permissive
+      networkIsolationPolicy: Permissive, CFSClean
     ${{ if ne(variables['Build.DefinitionName'], 'python - core') }}:
       featureFlags:
         autoBaseline: false

eng/pipelines/templates/stages/python-analyze-weekly.yml

@@ -2,6 +2,9 @@ parameters:
   - name: ServiceDirectory
     type: string
     default: ''
+  - name: DevFeedName
+    type: string
+    default: 'public/azure-sdk-for-python'
   - name: BuildTargetingString
     type: string
     default: 'azure-*'
@@ -29,6 +32,13 @@ stages:
             displayName: 'Use Python 3.10'
             inputs:
               versionSpec: '3.10'
+
+          # Authenticate pip to the configured Azure DevOps feed before installs.
+          - template: /eng/pipelines/templates/steps/auth-dev-feed.yml
+            parameters:
+              DevFeedName: ${{ parameters.DevFeedName }}
+              EnableTwineAuth: false
+
           - script: |
               python -m pip install -r eng/ci_tools.txt
             displayName: 'Prep Environment'