diff --git a/tools/ci_build/github/azure-pipelines/java-api-packaging-pipelines-gpu.yml b/tools/ci_build/github/azure-pipelines/java-api-packaging-pipelines-gpu.yml
index 266724927d..dbcf2cfadf 100644
--- a/tools/ci_build/github/azure-pipelines/java-api-packaging-pipelines-gpu.yml
+++ b/tools/ci_build/github/azure-pipelines/java-api-packaging-pipelines-gpu.yml
@@ -123,6 +123,21 @@ jobs:
     - template: templates/component-governance-component-detection-steps.yml
       parameters :
         condition : 'succeeded'
+        
+    - task: Semmle@0
+      inputs:
+        sourceCodeDirectory: '$(Build.SourcesDirectory)\java'
+        language: 'java'
+        cleanupBuildCommands: 'C:\ProgramData\chocolatey\bin\gradle.exe -Dorg.gradle.daemon=false -DUSE_CUDA=1 clean'
+        buildCommands: 'C:\ProgramData\chocolatey\bin\gradle.exe -Dorg.gradle.daemon=false -DUSE_CUDA=1 jar'
+        querySuite: 'Recommended'
+        timeout: '7200'
+        ram: '16384'
+        addProjectDirToScanningExclusionList: true
+        
+    - task: securedevelopmentteam.vss-secure-development-tools.build-task-publishsecurityanalysislogs.PublishSecurityAnalysisLogs@2
+      displayName: 'Publish Security Analysis Logs'
+      continueOnError: true        
 
     - template: templates/clean-agent-build-directory-step.yml
 
diff --git a/tools/ci_build/github/azure-pipelines/java-api-packaging-pipelines.yml b/tools/ci_build/github/azure-pipelines/java-api-packaging-pipelines.yml
index cd7a1b2b5f..b13cbe3ba3 100644
--- a/tools/ci_build/github/azure-pipelines/java-api-packaging-pipelines.yml
+++ b/tools/ci_build/github/azure-pipelines/java-api-packaging-pipelines.yml
@@ -168,6 +168,21 @@ jobs:
     - template: templates/component-governance-component-detection-steps.yml
       parameters :
         condition : 'succeeded'
+        
+    - task: Semmle@0
+      inputs:
+        sourceCodeDirectory: '$(Build.SourcesDirectory)\java'
+        language: 'java'
+        cleanupBuildCommands: 'C:\ProgramData\chocolatey\bin\gradle.exe -Dorg.gradle.daemon=false clean'
+        buildCommands: 'C:\ProgramData\chocolatey\bin\gradle.exe -Dorg.gradle.daemon=false jar'
+        querySuite: 'Recommended'
+        timeout: '7200'
+        ram: '16384'
+        addProjectDirToScanningExclusionList: true
+        
+    - task: securedevelopmentteam.vss-secure-development-tools.build-task-publishsecurityanalysislogs.PublishSecurityAnalysisLogs@2
+      displayName: 'Publish Security Analysis Logs'
+      continueOnError: true        
 
     - template: templates/clean-agent-build-directory-step.yml