From 13f873f44649a3a391a7419f742c9afd4cf78a3f Mon Sep 17 00:00:00 2001
From: Larry Golding <lgolding@comcast.net>
Date: Thu, 6 Aug 2020 12:04:18 -0700
Subject: [PATCH] Include GitHub DSP policy file in MultiTool NuGet package.

---
 src/Nuget/Sarif.Multitool.nuspec | 4 +++-
 src/ReleaseHistory.md            | 4 +---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/Nuget/Sarif.Multitool.nuspec b/src/Nuget/Sarif.Multitool.nuspec
index 71c57d8dd..dee0a3302 100644
--- a/src/Nuget/Sarif.Multitool.nuspec
+++ b/src/Nuget/Sarif.Multitool.nuspec
@@ -55,7 +55,9 @@
           target="tools\netcoreapp2.1\any"
           />
 
-    <file src="src\ReleaseHistory.md" />        
+    <file src="src\ReleaseHistory.md" />
+    <file src="policies\github-dsp.config.xml" target="policies" />
+    <file src="policies\github-dsp.config.sarif-external-properties" target="policies" />
     <file src="src\Sarif.Multitool\**\*.cs" target="src" />
   </files>
 </package>
\ No newline at end of file
diff --git a/src/ReleaseHistory.md b/src/ReleaseHistory.md
index 8ced2b652..f8eb91773 100644
--- a/src/ReleaseHistory.md
+++ b/src/ReleaseHistory.md
@@ -1,10 +1,8 @@
 # SARIF Package Release History (SDK, Driver, Converters, and Multitool)
 ## **v2.3.4** [Sdk](https://www.nuget.org/packages/Sarif.Sdk/2.3.4) | [Driver](https://www.nuget.org/packages/Sarif.Driver/2.3.4) | [Converters](https://www.nuget.org/packages/Sarif.Converters/2.3.4) | [Multitool](https://www.nuget.org/packages/Sarif.Multitool/2.3.4)
-* BUGFIX: Various Fortify FPR converter improvements (such as improve variable expansion in result messages).
 * COMMAND-LINE BREAKING: Change `merge` command output directory argument name to `output-directory`.
-
-## **v2.3.4** [Sdk](https://www.nuget.org/packages/Sarif.Sdk/2.3.4) | [Driver](https://www.nuget.org/packages/Sarif.Driver/2.3.4) | [Converters](https://www.nuget.org/packages/Sarif.Converters/2.3.4) | [Multitool](https://www.nuget.org/packages/Sarif.Multitool/2.3.4)
 * FEATURE: Add analysis rules appropriate for SARIF files that are to be uploaded to the GitHub Developer Security Portal.
+* BUGFIX: Various Fortify FPR converter improvements (such as improve variable expansion in result messages).
 * BUGFIX: The validator no longer reports `SARIF2010.ProvideCodeSnippets` if embedded file content for the specified artifact is present. [#2003](https://github.com/microsoft/sarif-sdk/issues/2003)
 
 ## **v2.3.3** [Sdk](https://www.nuget.org/packages/Sarif.Sdk/2.3.3) | [Driver](https://www.nuget.org/packages/Sarif.Driver/2.3.3) | [Converters](https://www.nuget.org/packages/Sarif.Converters/2.3.3) | [Multitool](https://www.nuget.org/packages/Sarif.Multitool/2.3.3)