diff --git a/VSInsertion/Packaging/cgmanifest.json b/VSInsertion/Packaging/cgmanifest.json
index 291b363dc3a..1cf10f0f413 100644
--- a/VSInsertion/Packaging/cgmanifest.json
+++ b/VSInsertion/Packaging/cgmanifest.json
@@ -5,7 +5,7 @@
                 "Type": "git",
                 "Git": {
                     "RepositoryUrl": "https://github.com/microsoft/CMake.git",
-                    "CommitHash": "4fe28dc1e760d8e63c5ce17b3b061333c2846a8a"
+                    "CommitHash": "544cf1c1a98f448372eb0581bee28df2faa09e16"
                 }
             }
         }
diff --git a/VSInsertion/Pipelines/build.yml b/VSInsertion/Pipelines/build.yml
index b590cd36e17..cbc4eba9cbc 100644
--- a/VSInsertion/Pipelines/build.yml
+++ b/VSInsertion/Pipelines/build.yml
@@ -50,6 +50,8 @@ variables:
   value: true
 - name: Codeql.Language
   value: cpp,csharp,javascript,powershell,python,ruby
+- name: ComponentDetection.SourcePath
+  value: $(Build.SourcesDirectory)/VSInsertion
 - name: DisableDockerDetector
   value: true
 - name: PackagingSolutionRoot
@@ -90,12 +92,16 @@ extends:
         pool:
           name: VSEngSS-MicroBuild2022-1ES
         templateContext:
+          sdl:
+            sbom:
+              BuildComponentPath: '$(ArchiveDir)'
           outputs:
           - output: pipelineArtifact
             displayName: 'Publish CMake x64 Artifact'
             targetPath: $(ArchiveDir)
             artifactName: CMakeX64
             codeSignValidationEnabled: false
+            sbomBuildDropPath: $(ArchiveDir)
         steps:
         - checkout: self
           clean: true
@@ -210,12 +216,16 @@ extends:
         pool:
           name: VSEngSS-MicroBuild2022-1ES
         templateContext:
+          sdl:
+            sbom:
+              BuildComponentPath: '$(ArchiveDir)'
           outputs:
           - output: pipelineArtifact
             displayName: 'Publish CMake ARM64 Artifact'
             targetPath: $(ArchiveDir)
             artifactName: CMakeArm64
             codeSignValidationEnabled: false
+            sbomBuildDropPath: $(ArchiveDir)
         steps:
         - checkout: self
           clean: true
@@ -275,12 +285,16 @@ extends:
         pool:
           name: VSEngSS-MicroBuild2022-1ES
         templateContext:
+          sdl:
+            sbom:
+              BuildComponentPath: '$(ArchiveDir)'
           outputs:
           - output: pipelineArtifact
             displayName: 'Publish CMake x86 Artifact'
             targetPath: $(ArchiveDir)
             artifactName: CMakeX86
             codeSignValidationEnabled: false
+            sbomBuildDropPath: $(ArchiveDir)
         steps:
         - checkout: self
           clean: true