Add variable group

.azure/pipelines/ci.yml

@@ -65,6 +65,9 @@ variables:
       valule: test
     - name: _PublishArgs
       value: ''
+  # used for post-build phases, internal builds only
+  - ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
+    - group: DotNet-Winforms-SDLValidation-Params
 
 stages:
 - stage: build