Specify custom ignore directories for source-build

azure-pipelines/builds/ci.yml

@@ -25,12 +25,6 @@ extends:
   template: azure-pipelines/MicroBuild.1ES.Official.yml@MicroBuildTemplate
   parameters:
     sdl:
-      componentgovernance:
-        # All of the SBRPs must be ignored because it is possible some of them are for vulnerable versions.
-        # Because they are reference only packages they are not vulnerable themselves.
-        ignoreDirectories: |
-          artifacts/source-build/self,
-          src/referencePackages
       sourceAnalysisPool:
         name: $(DncEngInternalBuildPool)
         image: 1es-windows-2022

azure-pipelines/templates/stages/build.yml

@@ -16,6 +16,10 @@ stages:
           artifacts: true
           manifests: true
       enableSourceBuild: true
+      sourceBuildParameters:
+        cgIgnoreDirectories:
+        - src/referencePackages
+        - artifacts/source-build/self
   - template: /azure-pipelines/templates/jobs/generatescript-tests.yml
     parameters:
       imageOs: windows