Set `EnableDetectorVcpkg` to `true` in environment for at least an analyzer job. https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/secure-supply-chain/oss-supply-chain-security/vcpkg#cg-vcpkg-detector Once this is done we shouldn't need to maintain `cgmanifest.json` files.