diff --git a/.pipeline/component-governance-detection.yaml b/.pipeline/component-governance-detection.yaml
index 3c2f87a4c..b2eac6127 100644
--- a/.pipeline/component-governance-detection.yaml
+++ b/.pipeline/component-governance-detection.yaml
@@ -1,6 +1,13 @@
 # This pipeline hosted in ADO will use the auto-injected component detection build task to detect possible incidents
 # and report alerts related to OSS consumed by this repository.
-trigger: none
+trigger:
+  branches:
+    include:
+    - main
+  paths:
+    include:
+    - go.sum
+    - go.mod
 
 pool:
   vmImage: ubuntu-18.04