From c64bc1e3afad21b158fbd2b593c04f81b7d0e1bf Mon Sep 17 00:00:00 2001
From: Qingchuan Hao <qinhao@microsoft.com>
Date: Tue, 13 Sep 2022 15:35:33 -0700
Subject: [PATCH] auto-trigger cg detection on go module change in main branch
 (#282)

---
 .pipeline/component-governance-detection.yaml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/.pipeline/component-governance-detection.yaml b/.pipeline/component-governance-detection.yaml
index 3c2f87a4c..b2eac6127 100644
--- a/.pipeline/component-governance-detection.yaml
+++ b/.pipeline/component-governance-detection.yaml
@@ -1,6 +1,13 @@
 # This pipeline hosted in ADO will use the auto-injected component detection build task to detect possible incidents
 # and report alerts related to OSS consumed by this repository.
-trigger: none
+trigger:
+  branches:
+    include:
+    - main
+  paths:
+    include:
+    - go.sum
+    - go.mod
 
 pool:
   vmImage: ubuntu-18.04