diff --git a/azure-pipelines.yml b/azure-pipelines.yml
index 78b9cb17c..ca8745b1b 100644
--- a/azure-pipelines.yml
+++ b/azure-pipelines.yml
@@ -28,6 +28,9 @@ extends:
         enabled: true
       policheck:
         enabled: true
+      binskim:
+        enabled: true
+        scanOutputDirectoryOnly: true
     pool:
       name: $(DncEngInternalBuildPool)
       image: 1es-windows-2022