fix

azure-pipelines.cg.yml

@@ -9,5 +9,9 @@ trigger:
 pool:
   vmImage: "ubuntu-latest"
 
+defaults:
+  run:
+    workingDirectory: $(System.DefaultWorkingDirectory)/manifest
+
 steps:
   - task: ComponentGovernanceComponentDetection@0

manifest/cgmanifest.json

@@ -9,10 +9,7 @@
             "CommitHash": "6718ae4e76be007542087b8a674d7a77861c7d08"
           }
         },
-        "DevelopmentDependency": false,
-        "skip": [
-         "package-lock.json"
-        ]
+        "DevelopmentDependency": false
       }
     ]
   }