Add CG Manually to Configure Exclude Dir (#2102)

* Add CG Manually to Configure Exclude Dir

Hopefully this will override the 1ES auto injected task because I can't find a way to configure that one. I've also asked them if that's possible.

The .vscode test package.json describes the built-in handlebars extension, not the handlebars npm package that has the vulnerability, so it should be excluded.

CG is auto injected in each task so I had to try adding it to each one.

* Make it only a step

* Edit the 1ES template configuration

* remove the task

1es-azure-pipeline.yml

@@ -70,6 +70,8 @@ extends:
         exclusionsFile: $(System.DefaultWorkingDirectory)\PoliCheckExclusions.xml
       tsa:
         enabled: true
+      componentgovernance:
+        ignoreDirectories: '.vscode-test/**'
     stages:
     - stage: Internal
       jobs:

pipeline-templates/build-test.yaml

@@ -41,4 +41,4 @@ jobs:
       condition:
     - script: ./test.sh
       displayName: 🔎 Test Mac and Linux
-      env: {DISPLAY: ':99.0'}
+      env: {DISPLAY: ':99.0'}

pipeline-templates/upstream-verify.yaml

@@ -20,4 +20,4 @@ jobs:
     inputs:
       scriptSource: 'filePath'
       scriptPath: 'dependency-verifier.py'
-      arguments: '$(System.PullRequest.TargetBranch)'
+      arguments: '$(System.PullRequest.TargetBranch)'