From 6a0d64e65c2b5a8b476b7c06053e4620cb1628a7 Mon Sep 17 00:00:00 2001 From: Jian Chen Date: Wed, 19 Jun 2024 11:07:02 -0700 Subject: [PATCH] Component Gov round 7 (#21051) ### Description ignoreDirectories does not recursively include sub folders like we thought it would. We need to add additional sub folders. ### Motivation and Context Fix CG : 1. https://aiinfra.visualstudio.com/Lotus/_componentGovernance/218239/alert/11474679?typeId=25427568 2. https://aiinfra.visualstudio.com/Lotus/_componentGovernance/218239/alert/11475140?typeId=25421034&pipelinesTrackingFilter=0 --- .../component-governance-component-detection-steps.yml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/tools/ci_build/github/azure-pipelines/templates/component-governance-component-detection-steps.yml b/tools/ci_build/github/azure-pipelines/templates/component-governance-component-detection-steps.yml index a78697498a..4987e3019d 100644 --- a/tools/ci_build/github/azure-pipelines/templates/component-governance-component-detection-steps.yml +++ b/tools/ci_build/github/azure-pipelines/templates/component-governance-component-detection-steps.yml @@ -20,17 +20,20 @@ steps: inputs: # ignore unit tests in emscripten. emscripten unit tests are not used in onnxruntime build # ignore onnx third_party directory. onnx third_party directory is not responsible for onnxruntime build - # because sometime there are multiple repo is checked out in the same pipeline, we also need to add the repo name, such as onnxruntime/ to the ignoreDirectories + # ignore pybind11 third_party directory. pybind11 third_party directory is not responsible for onnxruntime build + # ignore pybind11 tests directory. pybind11 tests directory is not responsible for onnxruntime build # ignore onnxruntime-extensions directory. onnxruntime-extensions directory is not responsible for onnxruntime build # ignore react_native e2e node_modules directory. react_native e2e node_modules directory is generated by react_native e2e tests - # ignore github directory. github directory is used for github actions, not for onnxruntime package + # ignore js node_modules directory. js node_modules directory is generated by js tests # ignore onnxruntime-inference-examples directory. onnxruntime-inference-examples directory is used for inference examples, not for onnxruntime package # ignore BinariesDirectory. BinariesDirectory is used for build output, not for onnxruntime package ignoreDirectories: '$(Build.Repository.LocalPath)/cmake/external/emsdk/upstream/emscripten/tests, $(Build.Repository.LocalPath)/cmake/external/onnx/third_party/benchmark, $(Build.Repository.LocalPath)/cmake/external/onnx/third_party/pybind11, + $(Build.Repository.LocalPath)/cmake/external/onnx/third_party/pybind11/tests, $(Build.Repository.LocalPath)/cmake/external/onnxruntime-extensions, $(Build.Repository.LocalPath)/js/react_native/e2e/node_modules, + $(Build.Repository.LocalPath)/js/node_modules, $(Build.SourcesDirectory)/onnxruntime-inference-examples, $(Build.BinariesDirectory)' \ No newline at end of file