diff --git a/azure-pipelines/builds/ci.yml b/azure-pipelines/builds/ci.yml
index 896fef904f..0f527e759b 100644
--- a/azure-pipelines/builds/ci.yml
+++ b/azure-pipelines/builds/ci.yml
@@ -25,12 +25,6 @@ extends:
   template: azure-pipelines/MicroBuild.1ES.Official.yml@MicroBuildTemplate
   parameters:
     sdl:
-      componentgovernance:
-        # All of the SBRPs must be ignored because it is possible some of them are for vulnerable versions.
-        # Because they are reference only packages they are not vulnerable themselves.
-        ignoreDirectories: |
-          artifacts/source-build/self,
-          src/referencePackages
       sourceAnalysisPool:
         name: $(DncEngInternalBuildPool)
         image: 1es-windows-2022
diff --git a/azure-pipelines/templates/stages/build.yml b/azure-pipelines/templates/stages/build.yml
index fe914f089e..ce5019b4b6 100644
--- a/azure-pipelines/templates/stages/build.yml
+++ b/azure-pipelines/templates/stages/build.yml
@@ -16,6 +16,10 @@ stages:
           artifacts: true
           manifests: true
       enableSourceBuild: true
+      sourceBuildParameters:
+        cgIgnoreDirectories:
+        - src/referencePackages
+        - artifacts/source-build/self
   - template: /azure-pipelines/templates/jobs/generatescript-tests.yml
     parameters:
       imageOs: windows