From 74adfc20996942144b0d07c45920b9ffa817d3f0 Mon Sep 17 00:00:00 2001
From: Kyle <92152685+idiskyle@users.noreply.github.com>
Date: Tue, 5 Nov 2024 00:39:28 +0800
Subject: [PATCH] Nuget Windows AI Pipeline, Disable SDL Submodules.  (#22711)

### Description
<!-- Describe your changes. -->
Set SDL's git submodule to false.


### Motivation and Context
<!-- - Why is this change required? What problem does it solve?
- If it fixes an open issue, please link to the issue here. -->
* Previous job's SDL logs:It has 'git submodule sync' command, which
means 'git submodule sync synchronizes all submodules while git
submodule sync'

* After set sdl git submodules to false, the logs don't have 'git
submodule sync' command.
---
 tools/ci_build/github/azure-pipelines/nuget-windows-ai.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tools/ci_build/github/azure-pipelines/nuget-windows-ai.yml b/tools/ci_build/github/azure-pipelines/nuget-windows-ai.yml
index e36d4bf37f..c6ab331640 100644
--- a/tools/ci_build/github/azure-pipelines/nuget-windows-ai.yml
+++ b/tools/ci_build/github/azure-pipelines/nuget-windows-ai.yml
@@ -17,6 +17,8 @@ extends:
       name: onnxruntime-Win-CPU-2022
       os: windows
     sdl:
+      git:
+        submodules: false
       tsa:
         enabled: true
       codeSignValidation: