Update PreFast run stage in OneBranchBuild.yml to "Guardian" to avoid race condition with build. (#1534)

* Remove PreFast settings from OneBranch pipeline

Removed PreFast parameters from build configuration.

* Update PreFast run stage in OneBranchBuild.yml

Changed PreFast run stage from 'Build' to 'Guardian' to enable it only during the Guardian stage.

* Correct indentation for PreFast configuration

Fix indentation for ob_sdl_prefast_runDuring in OneBranchBuild.yml

Author: vineeththomasalex

.pipelines/OneBranch.Official.yml

@@ -57,8 +57,6 @@ extends:
           BuildConfiguration: $(BuildConfiguration)
           BuildVersion: $(BuildVersion)
           OfficialBuild: true
-          ob_sdl_prefast_enabled: true
-          ob_sdl_prefast_runDuring: "Guardian" # Enabling PreFast only for build stage
 
     - stage: vpack
       dependsOn: build
@@ -68,7 +66,6 @@ extends:
             type: windows
           variables:
             ob_outputDirectory: '$(Build.SourcesDirectory)\out'
-
             ob_createvpack_enabled: true
             ob_createvpack_packagename: CppWinRT.Compiler
             ob_createvpack_owneralias: cpp4uwpt

.pipelines/jobs/OneBranchBuild.yml

@@ -32,7 +32,7 @@ jobs:
       ob_sdl_codeSignValidation_excludes: '-|**\*.exe;-|**\*.dll' 
 
     ob_sdl_prefast_enabled: true
-    ob_sdl_prefast_runDuring: 'Build'
+    ob_sdl_prefast_runDuring: "Guardian"
     ob_sdl_checkCompliantCompilerWarnings: true
 
     ob_symbolsPublishing_enabled: ${{ parameters.OfficialBuild }}