Add component detection step to builds

- aspnet/AspNetCore-Internal#1254

.azure/pipelines/ci.yml

@@ -77,6 +77,11 @@ jobs:
     - script: ./build.cmd -ci -sign /t:SignCheck /p:SignType=$(_SignType)
       displayName: Run sign check
       condition: eq(variables['_SignType'], 'real')
+
+    # Detect OSS Components in use in the product. Only needs to run on one OS in the matrix.
+    - task: ms.vss-governance-buildtask.governance-build-task-component-detection.ComponentGovernanceComponentDetection@0
+      displayName: Detect components
+      condition: eq(variables['system.pullrequest.isfork'], false)
     artifacts:
     - name: Windows_Packages
       path: artifacts/packages/