From 83a871f890cb6fbcca6fc4c7478118cf14da576e Mon Sep 17 00:00:00 2001
From: Jian Chen <cjian@microsoft.com>
Date: Tue, 14 May 2024 12:17:23 -0400
Subject: [PATCH] Fix critical and High issues from Component Governance
 (#20611)

### Description
<!-- Describe your changes. -->



### Motivation and Context
<!-- - Why is this change required? What problem does it solve?
- If it fixes an open issue, please link to the issue here. -->
---
 .../github/azure-pipelines/templates/c-api-linux-cpu.yml      | 2 +-
 .../component-governance-component-detection-steps.yml        | 4 +++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/tools/ci_build/github/azure-pipelines/templates/c-api-linux-cpu.yml b/tools/ci_build/github/azure-pipelines/templates/c-api-linux-cpu.yml
index 2da3b8a9bc..39d17e984c 100644
--- a/tools/ci_build/github/azure-pipelines/templates/c-api-linux-cpu.yml
+++ b/tools/ci_build/github/azure-pipelines/templates/c-api-linux-cpu.yml
@@ -40,7 +40,7 @@ jobs:
     clean: all
   variables:
   - name: skipComponentGovernanceDetection
-    value: ${{eq('${{parameters.OnnxruntimeNodejsBindingArch}}', 'arm64')}}
+    value: ${{ in('${{parameters.OnnxruntimeNodejsBindingArch}}', 'arm64', 'aarch64') }}
   timeoutInMinutes:  210
   pool: ${{parameters.PoolName}}
   steps:
diff --git a/tools/ci_build/github/azure-pipelines/templates/component-governance-component-detection-steps.yml b/tools/ci_build/github/azure-pipelines/templates/component-governance-component-detection-steps.yml
index 3d128fdb78..de67eaeb17 100644
--- a/tools/ci_build/github/azure-pipelines/templates/component-governance-component-detection-steps.yml
+++ b/tools/ci_build/github/azure-pipelines/templates/component-governance-component-detection-steps.yml
@@ -19,4 +19,6 @@ steps:
     inputs:
       # ignore dmlc-core tracker for its CI, which is not used in onnxruntime build
       # ignore unit tests in emscripten. emscripten unit tests are not used in onnxruntime build
-      ignoreDirectories: '$(Build.SourcesDirectory)/cmake/external/emsdk/upstream/emscripten/tests'
+      ignoreDirectories:
+        '$(Build.SourcesDirectory)/cmake/external/emsdk/upstream/emscripten/tests,
+        $(Build.SourcesDirectory)/cmake/external/onnx/third_party'
\ No newline at end of file