Add component governance pipeline (#30274)

* Add component governance pipeline

* Update DevOpsPipelineDefinitions/cg-pipeline.yaml

Co-authored-by: JohnMcPMS <johnmcp@microsoft.com>

Co-authored-by: denelon <denelon@microsoft.com>
Co-authored-by: JohnMcPMS <johnmcp@microsoft.com>

DevOpsPipelineDefinitions/cg-pipeline.yaml

@@ -0,0 +1,20 @@
+# Component Governance pipeline.
+# This pipeline is configured to run on weekly basis.
+# Uses Tools\cgmanifest.json
+
+trigger: none
+pr: none
+
+pool:
+  vmImage: windows-latest
+
+variables:
+  runCodesignValidationInjection: ${{ false }}
+
+steps:
+  - task: ComponentGovernanceComponentDetection@0
+    displayName: Component Governance
+    inputs:
+      scanType: 'Register'
+      verbosity: 'Verbose'
+      alertWarningLevel: 'High'

Tools/cgmanifest.json

@@ -0,0 +1,13 @@
+{
+    "Registrations": [
+        {
+            "Component": {
+                "Type": "git",
+                "git": {
+                    "RepositoryUrl": "https://github.com/cloudbase/powershell-yaml",
+                    "CommitHash": "03663c66e57ce2d0422077dc073bdb92e4d374b0"
+                }
+            },
+        },
+    ]
+}