dotnet-installer/eng/common/sdl/sdl.ps1

function Install-Gdn {
    param(
        [Parameter(Mandatory=$true)]
        [string]$Path,

        # If omitted, install the latest version of Guardian, otherwise install that specific version.
        [string]$Version
    )

    $ErrorActionPreference = 'Stop'
    Set-StrictMode -Version 2.0
    $disableConfigureToolsetImport = $true
    $global:LASTEXITCODE = 0

    # `tools.ps1` checks $ci to perform some actions. Since the SDL
    # scripts don't necessarily execute in the same agent that run the
    # build.ps1/sh script this variable isn't automatically set.
    $ci = $true
    . $PSScriptRoot\..\tools.ps1

    $argumentList = @("install", "Microsoft.Guardian.Cli", "-Source https://securitytools.pkgs.visualstudio.com/_packaging/Guardian/nuget/v3/index.json", "-OutputDirectory $Path", "-NonInteractive", "-NoCache")

    if ($Version) {
        $argumentList += "-Version $Version"
    }
    
    Start-Process nuget -Verbose -ArgumentList $argumentList -NoNewWindow -Wait

    $gdnCliPath = Get-ChildItem -Filter guardian.cmd -Recurse -Path $Path

    if (!$gdnCliPath)
    {
        Write-PipelineTelemetryError -Category 'Sdl' -Message 'Failure installing Guardian'
    }

    return $gdnCliPath.FullName
}