diff --git a/tools/ci_build/github/azure-pipelines/c-api-noopenmp-packaging-pipelines.yml b/tools/ci_build/github/azure-pipelines/c-api-noopenmp-packaging-pipelines.yml
index 543b2cfd19894..4a5ba81943b40 100644
--- a/tools/ci_build/github/azure-pipelines/c-api-noopenmp-packaging-pipelines.yml
+++ b/tools/ci_build/github/azure-pipelines/c-api-noopenmp-packaging-pipelines.yml
@@ -95,7 +95,6 @@ stages:
 - template: templates/c-api-cpu.yml
   parameters:
     RunOnnxRuntimeTests: ${{ parameters.RunOnnxRuntimeTests }}
-    DoCompliance: ${{ parameters.DoCompliance }}
     DoEsrp: ${{ parameters.DoEsrp }}
     IsReleaseBuild: ${{ parameters.IsReleaseBuild }}
     ${{ if eq(parameters.NugetPackageSuffix, 'NONE') }}:
@@ -117,7 +116,6 @@ stages:
 
 - template: stages/nuget-combine-cuda-stage.yml
   parameters:
-      DoCompliance: ${{ parameters.DoCompliance }}
       CudaVersion: 11.8
       RunOnnxRuntimeTests: ${{ parameters.RunOnnxRuntimeTests }}
       UseIncreasedTimeoutForTests: ${{ parameters.UseIncreasedTimeoutForTests }}
diff --git a/tools/ci_build/github/azure-pipelines/cuda-packaging-pipeline.yml b/tools/ci_build/github/azure-pipelines/cuda-packaging-pipeline.yml
index b24310ac0c3e0..6eb1e858a812b 100644
--- a/tools/ci_build/github/azure-pipelines/cuda-packaging-pipeline.yml
+++ b/tools/ci_build/github/azure-pipelines/cuda-packaging-pipeline.yml
@@ -1,125 +1,133 @@
 parameters:
-  - name: RunOnnxRuntimeTests
-    displayName: Run Tests?
-    type: boolean
-    default: true
-
-  - name: UseIncreasedTimeoutForTests
-    displayName: Increase timeout for tests? Set it to false if you are doing an Onnx Runtime release.
-    type: boolean
-    default: false
-
-  - name: DoCompliance
-    displayName: Run Compliance Tasks?
-    type: boolean
-    default: true
-
-  - name: DoEsrp
-    displayName: Run code sign tasks? Must be true if you are doing an ONNX Runtime release
-    type: boolean
-    default: true
-
-  - name: IsReleaseBuild
-    displayName: Is a release build? Set it to true if you are doing an ONNX Runtime release.
-    type: boolean
-    default: false
-
-  - name: PreReleaseVersionSuffixString
-    displayName: Suffix added to pre-release package version. Only used if IsReleaseBuild is true. Denotes the type of pre-release package.
-    type: string
-    values:
-      - alpha
-      - beta
-      - rc
-      - none
-    default: none
-
-  - name: PreReleaseVersionSuffixNumber
-    displayName: Number added to pre-release package version. Only used if IsReleaseBuild is true. Denotes the sequence of a pre-release package.
-    type: number
-    default: 0
-
-  # these 2 parameters are used for debugging.
-  - name: SpecificArtifact
-    displayName: Use Specific Artifact (Debugging only)
-    type: boolean
-    default: false
-
-  - name: BuildId
-    displayName: Pipeline BuildId, you could find it in the URL
-    type: string
-    default: '0'
-
-  - name: CudaVersion
-    displayName: CUDA version
-    type: string
-    default: '12.2'
-    values:
-      - 11.8
-      - 12.2
+- name: RunOnnxRuntimeTests
+  displayName: Run Tests?
+  type: boolean
+  default: true
+
+- name: UseIncreasedTimeoutForTests
+  displayName: Increase timeout for tests? Set it to false if you are doing an Onnx Runtime release.
+  type: boolean
+  default: false
+
+- name: DoEsrp
+  displayName: Run code sign tasks? Must be true if you are doing an ONNX Runtime release
+  type: boolean
+  default: true
+
+- name: IsReleaseBuild
+  displayName: Is a release build? Set it to true if you are doing an ONNX Runtime release.
+  type: boolean
+  default: false
+
+- name: PreReleaseVersionSuffixString
+  displayName: Suffix added to pre-release package version. Only used if IsReleaseBuild is true. Denotes the type of pre-release package.
+  type: string
+  values:
+  - alpha
+  - beta
+  - rc
+  - none
+  default: none
+
+- name: PreReleaseVersionSuffixNumber
+  displayName: Number added to pre-release package version. Only used if IsReleaseBuild is true. Denotes the sequence of a pre-release package.
+  type: number
+  default: 0
+
+# these 2 parameters are used for debugging.
+- name: SpecificArtifact
+  displayName: Use Specific Artifact (Debugging only)
+  type: boolean
+  default: false
+
+- name: BuildId
+  displayName: Pipeline BuildId, you could find it in the URL
+  type: string
+  default: '0'
+
+- name: CudaVersion
+  displayName: CUDA version
+  type: string
+  default: '12.2'
+  values:
+  - 11.8
+  - 12.2
 
 variables:
-  - template: templates/common-variables.yml
-  - name: ReleaseVersionSuffix
-    value: ''
-  - name: win_trt_home
-    ${{ if eq(parameters.CudaVersion, '11.8') }}:
-      value: $(Agent.TempDirectory)\${{ variables.win_trt_folder_cuda11 }}
-    ${{ if eq(parameters.CudaVersion, '12.2') }}:
-      value: $(Agent.TempDirectory)\${{ variables.win_trt_folder_cuda12 }}
-  - name: win_cuda_home
-    ${{ if eq(parameters.CudaVersion, '11.8') }}:
-      value: $(Agent.TempDirectory)\v11.8
-    ${{ if eq(parameters.CudaVersion, '12.2') }}:
-      value: $(Agent.TempDirectory)\v12.2
+- template: templates/common-variables.yml
+- name: ReleaseVersionSuffix
+  value: ''
+- name: win_trt_home
+  ${{ if eq(parameters.CudaVersion, '11.8') }}:
+    value: $(Agent.TempDirectory)\${{ variables.win_trt_folder_cuda11 }}
+  ${{ if eq(parameters.CudaVersion, '12.2') }}:
+    value: $(Agent.TempDirectory)\${{ variables.win_trt_folder_cuda12 }}
+- name: win_cuda_home
+  ${{ if eq(parameters.CudaVersion, '11.8') }}:
+    value: $(Agent.TempDirectory)\v11.8
+  ${{ if eq(parameters.CudaVersion, '12.2') }}:
+    value: $(Agent.TempDirectory)\v12.2
+
 resources:
   repositories:
-    - repository: onnxruntime-inference-examples # The name used to reference this repository in the checkout step
-      type: github
-      endpoint: ort-examples
-      name: microsoft/onnxruntime-inference-examples
-
-
-stages:
-  # Set ReleaseVersionSuffix
-  - template: stages/set_packaging_variables_stage.yml
-    parameters:
-      IsReleaseBuild: ${{ parameters.IsReleaseBuild }}
-      PreReleaseVersionSuffixString: ${{ parameters.PreReleaseVersionSuffixString }}
-      PreReleaseVersionSuffixNumber: ${{ parameters.PreReleaseVersionSuffixNumber }}
-
-  # this is needed for certain artifacts to be published
-  - stage: Linux_C_API_Packaging_CPU
-    dependsOn: [ ]
-    jobs:
-    - template: templates/c-api-linux-cpu.yml
+  - repository: onnxruntime-inference-examples # The name used to reference this repository in the checkout step
+    type: github
+    endpoint: ort-examples
+    name: microsoft/onnxruntime-inference-examples
+  - repository: 1esPipelines
+    type: git
+    name: 1ESPipelineTemplates/1ESPipelineTemplates
+    ref: refs/tags/release
+
+extends:
+  # The pipeline extends the 1ES PT which will inject different SDL and compliance tasks.
+  # For non-production pipelines, use "Unofficial" as defined below.
+  # For productions pipelines, use "Official".
+  template: v1/1ES.Official.PipelineTemplate.yml@1esPipelines
+  parameters:
+    sdl:
+      binskim:
+        enabled: true
+        analyzeTargetGlob: $(Build.ArtifactStagingDirectory)/**.dll
+      sourceAnalysisPool:
+        name: onnxruntime-Win-CPU-2022
+        os: windows
+      sourceRepositoriesToScan:
+        exclude:
+        - repository: onnxruntime-inference-examples
+      spotBugs:
+        enabled: false
+        justificationForDisabling: "Getting ##[error1. SpotBugs Error gdn.unknownFormatResult - File: spotbugs.xml, which indicates that SpotBugs found one or more errors, which are not handled by the Guardian right now."
+    stages:
+    # Set ReleaseVersionSuffix
+    - template: stages/set_packaging_variables_stage.yml
       parameters:
-        OnnxruntimeArch: 'x64'
-        OnnxruntimeNodejsBindingArch: 'x64'
-        PoolName: 'onnxruntime-Ubuntu2204-AMD-CPU'
-        PackageJava: false
-        PackageNodeJS: false
-
-  # Nuget Packaging
-  - template: stages/nuget-combine-cuda-stage.yml
-    parameters:
-      DoCompliance: ${{ parameters.DoCompliance }}
-      CudaVersion: ${{ parameters.CudaVersion }}
-      RunOnnxRuntimeTests: ${{ parameters.RunOnnxRuntimeTests }}
-      UseIncreasedTimeoutForTests: ${{ parameters.UseIncreasedTimeoutForTests }}
-      win_trt_home: ${{ variables.win_trt_home }}
-      win_cuda_home: ${{ variables.win_cuda_home }}
-      DoEsrp: ${{ parameters.DoEsrp }}
-      IsReleaseBuild: ${{ parameters.IsReleaseBuild }}
-      buildJava: true
-      buildNodejs: false
-      SpecificArtifact: ${{ parameters.SpecificArtifact }}
-      BuildId: ${{ parameters.BuildId }}
+        IsReleaseBuild: ${{ parameters.IsReleaseBuild }}
+        PreReleaseVersionSuffixString: ${{ parameters.PreReleaseVersionSuffixString }}
+        PreReleaseVersionSuffixNumber: ${{ parameters.PreReleaseVersionSuffixNumber }}
 
-  - template: stages/download-java-tools-stage.yml
+    # this is needed for certain artifacts to be published
+    - template: stages/c-api-linux-cpu-stage.yml
 
-  - template: stages/java-cuda-packaging-stage.yml
-    parameters:
-      CudaVersion: ${{ parameters.CudaVersion }}
-      SpecificArtifact: ${{ parameters.SpecificArtifact }}
-      BuildId: ${{ parameters.BuildId }}
+    # Nuget Packaging
+    - template: stages/nuget-combine-cuda-stage.yml
+      parameters:
+        CudaVersion: ${{ parameters.CudaVersion }}
+        RunOnnxRuntimeTests: ${{ parameters.RunOnnxRuntimeTests }}
+        UseIncreasedTimeoutForTests: ${{ parameters.UseIncreasedTimeoutForTests }}
+        win_trt_home: ${{ variables.win_trt_home }}
+        win_cuda_home: ${{ variables.win_cuda_home }}
+        DoEsrp: ${{ parameters.DoEsrp }}
+        IsReleaseBuild: ${{ parameters.IsReleaseBuild }}
+        buildJava: true
+        buildNodejs: false
+        SpecificArtifact: ${{ parameters.SpecificArtifact }}
+        BuildId: ${{ parameters.BuildId }}
+
+    - template: stages/download-java-tools-stage.yml
+
+    - template: stages/java-cuda-packaging-stage.yml
+      parameters:
+        CudaVersion: ${{ parameters.CudaVersion }}
+        SpecificArtifact: ${{ parameters.SpecificArtifact }}
+        BuildId: ${{ parameters.BuildId }}
diff --git a/tools/ci_build/github/azure-pipelines/nodejs/templates/test_linux.yml b/tools/ci_build/github/azure-pipelines/nodejs/templates/test_linux.yml
index 1d3e92056ebe2..c4102f5ba2b49 100644
--- a/tools/ci_build/github/azure-pipelines/nodejs/templates/test_linux.yml
+++ b/tools/ci_build/github/azure-pipelines/nodejs/templates/test_linux.yml
@@ -10,8 +10,10 @@ stages:
   - job: Nodejs_Test_${{ parameters.StageSuffix }}
     workspace:
       clean: all
-    timeoutInMinutes:  120
-    pool: ${{ parameters.AgentPool }}
+    timeoutInMinutes: 120
+    pool:
+      name: ${{ parameters.AgentPool }}
+      os: 'linux'
 
     variables:
     - name: OnnxRuntimeBuildDirectory
diff --git a/tools/ci_build/github/azure-pipelines/nodejs/templates/test_win.yml b/tools/ci_build/github/azure-pipelines/nodejs/templates/test_win.yml
index 667c4f2e70a63..5214a772f1a8f 100644
--- a/tools/ci_build/github/azure-pipelines/nodejs/templates/test_win.yml
+++ b/tools/ci_build/github/azure-pipelines/nodejs/templates/test_win.yml
@@ -10,8 +10,9 @@ stages:
   - job: Nodejs_Test_${{ parameters.StageSuffix }}
     workspace:
       clean: all
-    timeoutInMinutes:  120
-    pool: ${{ parameters.AgentPool }}
+    timeoutInMinutes: 120
+    pool:
+      name: ${{ parameters.AgentPool }}
     variables:
     - name: OnnxRuntimeBuildDirectory
       value: '$(Build.BinariesDirectory)'
diff --git a/tools/ci_build/github/azure-pipelines/nuget/templates/test_linux.yml b/tools/ci_build/github/azure-pipelines/nuget/templates/test_linux.yml
index 8c6efe2c55e3a..26a6c685ffa66 100644
--- a/tools/ci_build/github/azure-pipelines/nuget/templates/test_linux.yml
+++ b/tools/ci_build/github/azure-pipelines/nuget/templates/test_linux.yml
@@ -1,7 +1,7 @@
 parameters:
   AgentPool: 'onnxruntime-Ubuntu2204-AMD-CPU'
   ArtifactSuffix: ''
-  NugetPackageName : ''
+  NugetPackageName: ''
   StageSuffix: 'CPU'
   # More Suffix is used to differentiate testing for GPU and GPU-Windows/GPU-Linux packages
   MoreSuffix: ''
@@ -20,7 +20,9 @@ stages:
     workspace:
       clean: all
     timeoutInMinutes: 120
-    pool: ${{ parameters.AgentPool }}
+    pool:
+      name: ${{ parameters.AgentPool }}
+      os: 'linux'
 
     variables:
     - template: ../../templates/common-variables.yml
@@ -91,24 +93,24 @@ stages:
               "
         displayName: 'Run Package Test'
     - ${{ else }}:
-        - task: CmdLine@2
-          displayName: 'Create symlink for test models'
-          inputs:
-            script: |
-              ln -sf /data/models $(Build.BinariesDirectory)
-        - task: Bash@3
-          displayName: 'Run Package Test'
-          inputs:
-            targetType: filePath
-            filePath: '$(Build.SourcesDirectory)/csharp/test/Microsoft.ML.OnnxRuntime.EndToEndTests/runtest.sh'
-            arguments: '$(Build.BinariesDirectory)/nuget-artifact $(NuGetPackageVersionNumber)'
-            workingDirectory: $(Build.BinariesDirectory)
-          env:
-            OnnxRuntimeBuildDirectory: $(Build.BinariesDirectory)
-            DisableContribOps: $(DisableContribOps)
-            DisableMlOps: $(DisableMlOps)
-            IsReleaseBuild: $(IsReleaseBuild)
-            PACKAGENAME: ${{ parameters.NugetPackageName }}
+      - task: CmdLine@2
+        displayName: 'Create symlink for test models'
+        inputs:
+          script: |
+            ln -sf /data/models $(Build.BinariesDirectory)
+      - task: Bash@3
+        displayName: 'Run Package Test'
+        inputs:
+          targetType: filePath
+          filePath: '$(Build.SourcesDirectory)/csharp/test/Microsoft.ML.OnnxRuntime.EndToEndTests/runtest.sh'
+          arguments: '$(Build.BinariesDirectory)/nuget-artifact $(NuGetPackageVersionNumber)'
+          workingDirectory: $(Build.BinariesDirectory)
+        env:
+          OnnxRuntimeBuildDirectory: $(Build.BinariesDirectory)
+          DisableContribOps: $(DisableContribOps)
+          DisableMlOps: $(DisableMlOps)
+          IsReleaseBuild: $(IsReleaseBuild)
+          PACKAGENAME: ${{ parameters.NugetPackageName }}
 
     - template: ../../templates/component-governance-component-detection-steps.yml
       parameters:
diff --git a/tools/ci_build/github/azure-pipelines/stages/c-api-linux-cpu-stage.yml b/tools/ci_build/github/azure-pipelines/stages/c-api-linux-cpu-stage.yml
new file mode 100644
index 0000000000000..ee46d5dac2ff8
--- /dev/null
+++ b/tools/ci_build/github/azure-pipelines/stages/c-api-linux-cpu-stage.yml
@@ -0,0 +1,11 @@
+stages:
+- stage: Linux_C_API_Packaging_CPU
+  dependsOn: []
+  jobs:
+  - template: ../templates/c-api-linux-cpu.yml
+    parameters:
+      OnnxruntimeArch: 'x64'
+      OnnxruntimeNodejsBindingArch: 'x64'
+      PoolName: 'onnxruntime-Ubuntu2204-AMD-CPU'
+      PackageJava: false
+      PackageNodeJS: false
\ No newline at end of file
diff --git a/tools/ci_build/github/azure-pipelines/stages/download-java-tools-stage.yml b/tools/ci_build/github/azure-pipelines/stages/download-java-tools-stage.yml
index 49d73c699e7b7..7e5237b32bce2 100644
--- a/tools/ci_build/github/azure-pipelines/stages/download-java-tools-stage.yml
+++ b/tools/ci_build/github/azure-pipelines/stages/download-java-tools-stage.yml
@@ -5,6 +5,7 @@ stages:
   - job: Download_Java_Tools
     pool:
       name: 'onnxruntime-Ubuntu2204-AMD-CPU'
+      os: linux
     steps:
     - checkout: none
     - task: CmdLine@2
@@ -17,11 +18,13 @@ stages:
           wget --tries=3 https://oss.sonatype.org/service/local/repositories/releases/content/com/google/protobuf/protobuf-java/3.21.7/protobuf-java-3.21.7.jar -P ./
           popd
         workingDirectory: '$(Agent.TempDirectory)'
-    - task: PublishPipelineArtifact@1
+
+    - task: 1ES.PublishPipelineArtifact@1
       displayName: 'Publish Pipeline Java Tools Artifact'
       inputs:
         targetPath: '$(Agent.TempDirectory)/java-tools'
         artifact: 'onnxruntime-java-tools'
+
     - template: ../templates/component-governance-component-detection-steps.yml
       parameters :
         condition : 'succeeded'
\ No newline at end of file
diff --git a/tools/ci_build/github/azure-pipelines/stages/java-cuda-packaging-stage.yml b/tools/ci_build/github/azure-pipelines/stages/java-cuda-packaging-stage.yml
index 82ac898906b9e..6c3407c09d463 100644
--- a/tools/ci_build/github/azure-pipelines/stages/java-cuda-packaging-stage.yml
+++ b/tools/ci_build/github/azure-pipelines/stages/java-cuda-packaging-stage.yml
@@ -73,10 +73,10 @@ stages:
         SourceFolder: '$(Build.BinariesDirectory)\java-artifact\onnxruntime-java-win-x64'
         TargetFolder: '$(Build.ArtifactStagingDirectory)'
 
-    - task: PublishPipelineArtifact@1
+    - task: 1ES.PublishPipelineArtifact@1
       displayName: 'Publish Pipeline Artifact'
       inputs:
-        targetPath: '$(Build.ArtifactStagingDirectory)'
+        path: '$(Build.ArtifactStagingDirectory)'
         artifact: 'onnxruntime-java-gpu'
 
     - template: ../templates/component-governance-component-detection-steps.yml
@@ -136,7 +136,9 @@ stages:
       Jar_Packaging_GPU
     workspace:
       clean: all
-    pool: 'Onnxruntime-Linux-GPU'
+    pool:
+      name: 'Onnxruntime-Linux-GPU-A10'
+      os: linux
     variables:
     - name: runCodesignValidationInjection
       value: false
diff --git a/tools/ci_build/github/azure-pipelines/stages/nuget-combine-cuda-stage.yml b/tools/ci_build/github/azure-pipelines/stages/nuget-combine-cuda-stage.yml
index 9c7fbc24ab1b6..893bf3f1ec394 100644
--- a/tools/ci_build/github/azure-pipelines/stages/nuget-combine-cuda-stage.yml
+++ b/tools/ci_build/github/azure-pipelines/stages/nuget-combine-cuda-stage.yml
@@ -1,7 +1,4 @@
 parameters:
-- name: DoCompliance
-  type: boolean
-
 - name: DoEsrp
   type: boolean
 
@@ -53,7 +50,6 @@ stages:
 
 - template: nuget-cuda-packaging-stage.yml
   parameters:
-    DoCompliance: ${{ parameters.DoCompliance }}
     DoEsrp: ${{ parameters.DoEsrp }}
     IsReleaseBuild: ${{ parameters.IsReleaseBuild }}
     SpecificArtifact: ${{ parameters.SpecificArtifact }}
@@ -61,8 +57,8 @@ stages:
 
 - template: ../nuget/templates/test_win.yml
   parameters:
-    AgentPool : 'onnxruntime-Win2022-GPU-A10'
-    NugetPackageName : 'Microsoft.ML.OnnxRuntime.Gpu'
+    AgentPool: 'onnxruntime-Win2022-GPU-A10'
+    NugetPackageName: 'Microsoft.ML.OnnxRuntime.Gpu'
     ArtifactSuffix: 'GPU'
     StageSuffix: 'GPU'
     Skipx86Tests: 'true'
@@ -72,8 +68,8 @@ stages:
 
 - template: ../nuget/templates/test_win.yml
   parameters:
-    AgentPool : 'onnxruntime-Win2022-GPU-A10'
-    NugetPackageName : 'Microsoft.ML.OnnxRuntime.Gpu.Windows'
+    AgentPool: 'onnxruntime-Win2022-GPU-A10'
+    NugetPackageName: 'Microsoft.ML.OnnxRuntime.Gpu.Windows'
     ArtifactSuffix: 'GPU'
     StageSuffix: 'GPU'
     MoreSuffix: '_Windows'
@@ -84,21 +80,21 @@ stages:
 
 - template: ../nuget/templates/test_linux.yml
   parameters:
-    AgentPool : Onnxruntime-Linux-GPU-A10
+    AgentPool: Onnxruntime-Linux-GPU-A10
     ArtifactSuffix: 'GPU'
     StageSuffix: 'GPU'
-    NugetPackageName : 'Microsoft.ML.OnnxRuntime.Gpu'
+    NugetPackageName: 'Microsoft.ML.OnnxRuntime.Gpu'
     CudaVersion: ${{ parameters.CudaVersion }}
     SpecificArtifact: ${{ parameters.specificArtifact }}
     BuildId: ${{ parameters.BuildId }}
 
 - template: ../nuget/templates/test_linux.yml
   parameters:
-    AgentPool : Onnxruntime-Linux-GPU-A10
+    AgentPool: Onnxruntime-Linux-GPU-A10
     ArtifactSuffix: 'GPU'
     StageSuffix: 'GPU'
     MoreSuffix: '_Linux'
-    NugetPackageName : 'Microsoft.ML.OnnxRuntime.Gpu.Linux'
+    NugetPackageName: 'Microsoft.ML.OnnxRuntime.Gpu.Linux'
     CudaVersion: ${{ parameters.CudaVersion }}
     SpecificArtifact: ${{ parameters.specificArtifact }}
     BuildId: ${{ parameters.BuildId }}
diff --git a/tools/ci_build/github/azure-pipelines/stages/nuget-cuda-packaging-stage.yml b/tools/ci_build/github/azure-pipelines/stages/nuget-cuda-packaging-stage.yml
index 5ae60aac8f9b4..5c5b464fe24e2 100644
--- a/tools/ci_build/github/azure-pipelines/stages/nuget-cuda-packaging-stage.yml
+++ b/tools/ci_build/github/azure-pipelines/stages/nuget-cuda-packaging-stage.yml
@@ -1,7 +1,4 @@
 parameters:
-- name: DoCompliance
-  type: boolean
-
 - name: DoEsrp
   type: boolean
 
@@ -21,197 +18,198 @@ stages:
 # Win/Linux CUDA Combined packaging
 - stage: NuGet_Packaging_GPU
   dependsOn:
-    - Setup
-    - Windows_Packaging_CUDA
-    - Windows_Packaging_TensorRT
-    - Linux_C_API_Packaging_GPU
-#    This is need for Download Linux CustomOp TestData
-    - Linux_C_API_Packaging_CPU
+  - Setup
+  - Windows_Packaging_CUDA
+  - Windows_Packaging_TensorRT
+  - Linux_C_API_Packaging_GPU
+  #    This is need for Download Linux CustomOp TestData
+  - Linux_C_API_Packaging_CPU
   condition: succeeded()
   jobs:
-    - job: NuGet_Packaging_GPU
-      workspace:
-        clean: all
-      pool: 'Onnxruntime-Win-CPU-2022'
-      variables:
-        breakCodesignValidationInjection: ${{ parameters.DoEsrp }}
-        ReleaseVersionSuffix: $[stageDependencies.Setup.Set_Variables.outputs['Set_Release_Version_Suffix.ReleaseVersionSuffix']]
-        BuildDate: $[format('{0:yyyyMMdd}', pipeline.startTime)]
-        BuildTime: $[format('{0:HHmm}', pipeline.startTime)]
-
-      steps:
-        - checkout: self
-          submodules: true
-        - template: ../templates/flex-downloadPipelineArtifact.yml
-          parameters:
-            StepName: 'Download Pipeline Artifact - NuGet'
-            ArtifactName: 'onnxruntime-win-x64-cuda'
-            TargetPath: '$(Build.BinariesDirectory)/nuget-artifact'
-            SpecificArtifact: ${{ parameters.SpecificArtifact }}
-            BuildId: ${{ parameters.BuildId }}
-
-        - template: ../templates/flex-downloadPipelineArtifact.yml
-          parameters:
-            StepName: 'Download Pipeline Artifact - NuGet'
-            ArtifactName: 'onnxruntime-win-x64-tensorrt'
-            TargetPath: '$(Build.BinariesDirectory)/nuget-artifact'
-            SpecificArtifact: ${{ parameters.SpecificArtifact }}
-            BuildId: ${{ parameters.BuildId }}
-
-        - template: ../templates/flex-downloadPipelineArtifact.yml
-          parameters:
-            StepName: 'Download Pipeline Artifact - NuGet'
-            ArtifactName: 'onnxruntime-linux-x64-cuda'
-            TargetPath: '$(Build.BinariesDirectory)/nuget-artifact'
-            SpecificArtifact: ${{ parameters.SpecificArtifact }}
-            BuildId: ${{ parameters.BuildId }}
-
-        - template: ../templates/flex-downloadPipelineArtifact.yml
-          parameters:
-            StepName: 'Download Pipeline Artifact - NuGet'
-            ArtifactName: 'onnxruntime-linux-x64-tensorrt'
-            TargetPath: '$(Build.BinariesDirectory)/nuget-artifact'
-            SpecificArtifact: ${{ parameters.SpecificArtifact }}
-            BuildId: ${{ parameters.BuildId }}
-
-        # Reconstruct the build dir
-        - task: PowerShell@2
-          displayName: 'PS: Extract nuget files gpu'
-          inputs:
-            targetType: filePath
-            filePath: $(Build.SourcesDirectory)\tools\ci_build\github\windows\extract_nuget_files_gpu.ps1
-
-        - script: |
-            dir
-          workingDirectory: '$(Build.BinariesDirectory)/nuget-artifact'
-          displayName: 'List artifacts'
-
-        - script: |
-            mklink /D /J models C:\local\models
-          workingDirectory: '$(Build.BinariesDirectory)'
-          displayName: 'Create models link'
-
-        - task: NuGetToolInstaller@0
-          displayName: Use Nuget 6.10.x
-          inputs:
-            versionSpec: 6.10.x
-
-        - task: MSBuild@1
-          displayName: 'Restore NuGet Packages and create project.assets.json'
-          inputs:
-            solution: '$(Build.SourcesDirectory)\csharp\OnnxRuntime.DesktopOnly.CSharp.sln'
-            platform: 'Any CPU'
-            configuration: RelWithDebInfo
-            msbuildArguments: '-t:restore -p:OrtPackageId="Microsoft.ML.OnnxRuntime.Gpu"'
-            workingDirectory: '$(Build.SourcesDirectory)\csharp'
-
-        - task: MSBuild@1
-          displayName: 'Build C# bindings'
-          inputs:
-            solution: '$(Build.SourcesDirectory)\csharp\OnnxRuntime.DesktopOnly.CSharp.sln'
-            configuration: RelWithDebInfo
-            platform: 'Any CPU'
-            msbuildArguments: >
-              -p:OnnxRuntimeBuildDirectory="$(Build.BinariesDirectory)"
-              -p:OrtPackageId="Microsoft.ML.OnnxRuntime.Gpu"
-              -p:IsReleaseBuild=${{ parameters.IsReleaseBuild }}
-              -p:ReleaseVersionSuffix=$(ReleaseVersionSuffix)
-            workingDirectory: '$(Build.SourcesDirectory)\csharp'
-
-        - template: ../templates/win-esrp-dll.yml
-          parameters:
-            FolderPath: '$(Build.SourcesDirectory)\csharp\src\Microsoft.ML.OnnxRuntime\bin\RelWithDebInfo'
-            DisplayName: 'ESRP - Sign C# dlls'
-            DoEsrp: ${{ parameters.DoEsrp }}
-
-        - task: UsePythonVersion@0
-          displayName: 'Use Python'
-          inputs:
-            versionSpec: 3.12
-
-        - task: MSBuild@1
-          displayName: 'Build Nuget Packages'
-          inputs:
-            solution: '$(Build.SourcesDirectory)\csharp\OnnxRuntime.CSharp.proj'
-            configuration: RelWithDebInfo
-            platform: 'Any CPU'
-            msbuildArguments: '-t:CreatePackage -p:OnnxRuntimeBuildDirectory="$(Build.BinariesDirectory)" -p:OrtPackageId=Microsoft.ML.OnnxRuntime.Gpu -p:IsReleaseBuild=${{ parameters.IsReleaseBuild }}
+  - job: NuGet_Packaging_GPU
+    workspace:
+      clean: all
+    pool:
+      name: 'onnxruntime-Win-CPU-2022'
+    variables:
+      breakCodesignValidationInjection: ${{ parameters.DoEsrp }}
+      ReleaseVersionSuffix: $[stageDependencies.Setup.Set_Variables.outputs['Set_Release_Version_Suffix.ReleaseVersionSuffix']]
+      BuildDate: $[format('{0:yyyyMMdd}', pipeline.startTime)]
+      BuildTime: $[format('{0:HHmm}', pipeline.startTime)]
+
+    steps:
+    - checkout: self
+      submodules: true
+    - template: ../templates/flex-downloadPipelineArtifact.yml
+      parameters:
+        StepName: 'Download Pipeline Artifact - NuGet'
+        ArtifactName: 'onnxruntime-win-x64-cuda'
+        TargetPath: '$(Build.BinariesDirectory)/nuget-artifact'
+        SpecificArtifact: ${{ parameters.SpecificArtifact }}
+        BuildId: ${{ parameters.BuildId }}
+
+    - template: ../templates/flex-downloadPipelineArtifact.yml
+      parameters:
+        StepName: 'Download Pipeline Artifact - NuGet'
+        ArtifactName: 'onnxruntime-win-x64-tensorrt'
+        TargetPath: '$(Build.BinariesDirectory)/nuget-artifact'
+        SpecificArtifact: ${{ parameters.SpecificArtifact }}
+        BuildId: ${{ parameters.BuildId }}
+
+    - template: ../templates/flex-downloadPipelineArtifact.yml
+      parameters:
+        StepName: 'Download Pipeline Artifact - NuGet'
+        ArtifactName: 'onnxruntime-linux-x64-cuda'
+        TargetPath: '$(Build.BinariesDirectory)/nuget-artifact'
+        SpecificArtifact: ${{ parameters.SpecificArtifact }}
+        BuildId: ${{ parameters.BuildId }}
+
+    - template: ../templates/flex-downloadPipelineArtifact.yml
+      parameters:
+        StepName: 'Download Pipeline Artifact - NuGet'
+        ArtifactName: 'onnxruntime-linux-x64-tensorrt'
+        TargetPath: '$(Build.BinariesDirectory)/nuget-artifact'
+        SpecificArtifact: ${{ parameters.SpecificArtifact }}
+        BuildId: ${{ parameters.BuildId }}
+
+    # Reconstruct the build dir
+    - task: PowerShell@2
+      displayName: 'PS: Extract nuget files gpu'
+      inputs:
+        targetType: filePath
+        filePath: $(Build.SourcesDirectory)\tools\ci_build\github\windows\extract_nuget_files_gpu.ps1
+
+    - script: |
+        dir
+      workingDirectory: '$(Build.BinariesDirectory)/nuget-artifact'
+      displayName: 'List artifacts'
+
+    - script: |
+        mklink /D /J models C:\local\models
+      workingDirectory: '$(Build.BinariesDirectory)'
+      displayName: 'Create models link'
+
+    - task: NuGetToolInstaller@0
+      displayName: Use Nuget 6.10.x
+      inputs:
+        versionSpec: 6.10.x
+
+    - task: MSBuild@1
+      displayName: 'Restore NuGet Packages and create project.assets.json'
+      inputs:
+        solution: '$(Build.SourcesDirectory)\csharp\OnnxRuntime.DesktopOnly.CSharp.sln'
+        platform: 'Any CPU'
+        configuration: RelWithDebInfo
+        msbuildArguments: '-t:restore -p:OrtPackageId="Microsoft.ML.OnnxRuntime.Gpu"'
+        workingDirectory: '$(Build.SourcesDirectory)\csharp'
+
+    - task: MSBuild@1
+      displayName: 'Build C# bindings'
+      inputs:
+        solution: '$(Build.SourcesDirectory)\csharp\OnnxRuntime.DesktopOnly.CSharp.sln'
+        configuration: RelWithDebInfo
+        platform: 'Any CPU'
+        msbuildArguments: >
+          -p:OnnxRuntimeBuildDirectory="$(Build.BinariesDirectory)"
+          -p:OrtPackageId="Microsoft.ML.OnnxRuntime.Gpu"
+          -p:IsReleaseBuild=${{ parameters.IsReleaseBuild }}
+          -p:ReleaseVersionSuffix=$(ReleaseVersionSuffix)
+        workingDirectory: '$(Build.SourcesDirectory)\csharp'
+
+    - template: ../templates/win-esrp-dll.yml
+      parameters:
+        FolderPath: '$(Build.SourcesDirectory)\csharp\src\Microsoft.ML.OnnxRuntime\bin\RelWithDebInfo'
+        DisplayName: 'ESRP - Sign C# dlls'
+        DoEsrp: ${{ parameters.DoEsrp }}
+
+    - task: UsePythonVersion@0
+      displayName: 'Use Python'
+      inputs:
+        versionSpec: 3.12
+
+    - task: MSBuild@1
+      displayName: 'Build Nuget Packages'
+      inputs:
+        solution: '$(Build.SourcesDirectory)\csharp\OnnxRuntime.CSharp.proj'
+        configuration: RelWithDebInfo
+        platform: 'Any CPU'
+        msbuildArguments: '-t:CreatePackage -p:OnnxRuntimeBuildDirectory="$(Build.BinariesDirectory)" -p:OrtPackageId=Microsoft.ML.OnnxRuntime.Gpu -p:IsReleaseBuild=${{ parameters.IsReleaseBuild }}
                               -p:ReleaseVersionSuffix=$(ReleaseVersionSuffix) -p:CurrentDate=$(BuildDate) -p:CurrentTime=$(BuildTime)'
-            workingDirectory: '$(Build.SourcesDirectory)\csharp'
-
-        - task: BatchScript@1
-          displayName: 'Add TensorRT header file to the native nuGet package'
-          inputs:
-            filename: $(Build.SourcesDirectory)\tools\ci_build\github\windows\bundle_nuget_with_native_headers.bat
-            workingFolder: $(Build.BinariesDirectory)\RelWithDebInfo\RelWithDebInfo
-
-        - task: CopyFiles@2
-          displayName: 'Copy nuget packages to: $(Build.ArtifactStagingDirectory)'
-          inputs:
-            SourceFolder: '$(Build.BinariesDirectory)\RelWithDebInfo\RelWithDebInfo'
-            Contents: '*.snupkg'
-            TargetFolder: '$(Build.ArtifactStagingDirectory)'
-
-        - task: CopyFiles@2
-          displayName: 'Copy nuget packages to: $(Build.ArtifactStagingDirectory)'
-          inputs:
-            SourceFolder: '$(Build.BinariesDirectory)\RelWithDebInfo\RelWithDebInfo'
-            Contents: '*.nupkg'
-            TargetFolder: '$(Build.ArtifactStagingDirectory)'
-
-        - task: CopyFiles@2
-          displayName: 'Copy nuget packages to: $(Build.ArtifactStagingDirectory)'
-          inputs:
-            SourceFolder: '$(Build.SourcesDirectory)\csharp\src\Microsoft.ML.OnnxRuntime\bin\RelWithDebInfo'
-            Contents: '*.nupkg'
-            TargetFolder: '$(Build.ArtifactStagingDirectory)'
-
-        - template: ../templates/esrp_nuget.yml
-          parameters:
-            DisplayName: 'ESRP - sign NuGet package'
-            FolderPath: '$(Build.ArtifactStagingDirectory)'
-            DoEsrp: ${{ parameters.DoEsrp }}
-
-        - template: ../templates/validate-package.yml
-          parameters:
-            PackageType: 'nuget'
-            PackagePath: '$(Build.ArtifactStagingDirectory)'
-            PlatformsSupported: 'win-x64,linux-x64'
-            # 1* stands for version number. we use it to filter Gpu.Windows and Gpu.Linux packages
-            PackageName: 'Microsoft.ML.OnnxRuntime.Gpu.1*nupkg'
-            VerifyNugetSigning: false
-
-        - template: ../templates/validate-package.yml
-          parameters:
-            PackageType: 'nuget'
-            PackagePath: '$(Build.ArtifactStagingDirectory)'
-            PackageName: 'Microsoft.ML.OnnxRuntime.Gpu.Windows.*nupkg'
-            PlatformsSupported: 'win-x64'
-            VerifyNugetSigning: false
-
-        - template: ../templates/validate-package.yml
-          parameters:
-            PackageType: 'nuget'
-            PackagePath: '$(Build.ArtifactStagingDirectory)'
-            PackageName: 'Microsoft.ML.OnnxRuntime.Gpu.Linux.*nupkg'
-            PlatformsSupported: 'linux-x64'
-            VerifyNugetSigning: false
-
-        - task: MSBuild@1
-          displayName: 'Clean C#'
-          inputs:
-            solution: '$(Build.SourcesDirectory)\csharp\OnnxRuntime.DesktopOnly.CSharp.sln'
-            platform: 'Any CPU'
-            configuration: RelWithDebInfo
-            msbuildArguments: '-t:Clean -p:OnnxRuntimeBuildDirectory="$(Build.BinariesDirectory)" -p:OrtPackageId=Microsoft.ML.OnnxRuntime.Gpu'
-            workingDirectory: '$(Build.SourcesDirectory)\csharp'
-
-        - template: ../templates/component-governance-component-detection-steps.yml
-          parameters:
-            condition: 'succeeded'
-
-        - task: PublishPipelineArtifact@0
-          displayName: 'Publish Pipeline NuGet Artifact'
-          inputs:
-            artifactName: 'drop-signed-nuget-GPU'
-            targetPath: '$(Build.ArtifactStagingDirectory)'
+        workingDirectory: '$(Build.SourcesDirectory)\csharp'
+
+    - task: BatchScript@1
+      displayName: 'Add TensorRT header file to the native nuGet package'
+      inputs:
+        filename: $(Build.SourcesDirectory)\tools\ci_build\github\windows\bundle_nuget_with_native_headers.bat
+        workingFolder: $(Build.BinariesDirectory)\RelWithDebInfo\RelWithDebInfo
+
+    - task: CopyFiles@2
+      displayName: 'Copy nuget packages to: $(Build.ArtifactStagingDirectory)'
+      inputs:
+        SourceFolder: '$(Build.BinariesDirectory)\RelWithDebInfo\RelWithDebInfo'
+        Contents: '*.snupkg'
+        TargetFolder: '$(Build.ArtifactStagingDirectory)'
+
+    - task: CopyFiles@2
+      displayName: 'Copy nuget packages to: $(Build.ArtifactStagingDirectory)'
+      inputs:
+        SourceFolder: '$(Build.BinariesDirectory)\RelWithDebInfo\RelWithDebInfo'
+        Contents: '*.nupkg'
+        TargetFolder: '$(Build.ArtifactStagingDirectory)'
+
+    - task: CopyFiles@2
+      displayName: 'Copy nuget packages to: $(Build.ArtifactStagingDirectory)'
+      inputs:
+        SourceFolder: '$(Build.SourcesDirectory)\csharp\src\Microsoft.ML.OnnxRuntime\bin\RelWithDebInfo'
+        Contents: '*.nupkg'
+        TargetFolder: '$(Build.ArtifactStagingDirectory)'
+
+    - template: ../templates/esrp_nuget.yml
+      parameters:
+        DisplayName: 'ESRP - sign NuGet package'
+        FolderPath: '$(Build.ArtifactStagingDirectory)'
+        DoEsrp: ${{ parameters.DoEsrp }}
+
+    - template: ../templates/validate-package.yml
+      parameters:
+        PackageType: 'nuget'
+        PackagePath: '$(Build.ArtifactStagingDirectory)'
+        PlatformsSupported: 'win-x64,linux-x64'
+        # 1* stands for version number. we use it to filter Gpu.Windows and Gpu.Linux packages
+        PackageName: 'Microsoft.ML.OnnxRuntime.Gpu.1*nupkg'
+        VerifyNugetSigning: false
+
+    - template: ../templates/validate-package.yml
+      parameters:
+        PackageType: 'nuget'
+        PackagePath: '$(Build.ArtifactStagingDirectory)'
+        PackageName: 'Microsoft.ML.OnnxRuntime.Gpu.Windows.*nupkg'
+        PlatformsSupported: 'win-x64'
+        VerifyNugetSigning: false
+
+    - template: ../templates/validate-package.yml
+      parameters:
+        PackageType: 'nuget'
+        PackagePath: '$(Build.ArtifactStagingDirectory)'
+        PackageName: 'Microsoft.ML.OnnxRuntime.Gpu.Linux.*nupkg'
+        PlatformsSupported: 'linux-x64'
+        VerifyNugetSigning: false
+
+    - task: MSBuild@1
+      displayName: 'Clean C#'
+      inputs:
+        solution: '$(Build.SourcesDirectory)\csharp\OnnxRuntime.DesktopOnly.CSharp.sln'
+        platform: 'Any CPU'
+        configuration: RelWithDebInfo
+        msbuildArguments: '-t:Clean -p:OnnxRuntimeBuildDirectory="$(Build.BinariesDirectory)" -p:OrtPackageId=Microsoft.ML.OnnxRuntime.Gpu'
+        workingDirectory: '$(Build.SourcesDirectory)\csharp'
+
+    - template: ../templates/component-governance-component-detection-steps.yml
+      parameters:
+        condition: 'succeeded'
+
+    - task: 1ES.PublishPipelineArtifact@1
+      displayName: 'Publish Pipeline NuGet Artifact'
+      inputs:
+        artifactName: 'drop-signed-nuget-GPU'
+        targetPath: '$(Build.ArtifactStagingDirectory)'
diff --git a/tools/ci_build/github/azure-pipelines/stages/nuget-linux-cuda-packaging-stage.yml b/tools/ci_build/github/azure-pipelines/stages/nuget-linux-cuda-packaging-stage.yml
index 6e9e3c80a298c..06576ac05569e 100644
--- a/tools/ci_build/github/azure-pipelines/stages/nuget-linux-cuda-packaging-stage.yml
+++ b/tools/ci_build/github/azure-pipelines/stages/nuget-linux-cuda-packaging-stage.yml
@@ -15,7 +15,9 @@ stages:
     workspace:
       clean: all
     timeoutInMinutes: 150
-    pool: 'onnxruntime-Ubuntu2204-AMD-CPU'
+    pool:
+      name: 'onnxruntime-Ubuntu2204-AMD-CPU'
+      os: linux
     variables:
     - name: CUDA_VERSION_MAJOR
       ${{ if eq(parameters.CudaVersion, '11.8') }}:
@@ -48,6 +50,7 @@ stages:
           version: '$(OnnxRuntimeVersion)'
           libraryName: 'libonnxruntime.so'
           nativeLibraryName: 'libonnxruntime4j_jni.so'
+          is1ES: true
 
     - template: ../templates/c-api-artifacts-package-and-publish-steps-posix.yml
       parameters:
@@ -66,7 +69,9 @@ stages:
     workspace:
       clean: all
     timeoutInMinutes: 180
-    pool: 'onnxruntime-Ubuntu2204-AMD-CPU'
+    pool:
+      name: 'onnxruntime-Ubuntu2204-AMD-CPU'
+      os: linux
     variables:
     - template: ../templates/common-variables.yml
     - name: CUDA_VERSION_MAJOR
@@ -109,6 +114,7 @@ stages:
           version: '$(OnnxRuntimeVersion)'
           libraryName: 'libonnxruntime.so'
           nativeLibraryName: 'libonnxruntime4j_jni.so'
+          is1ES: true
 
     - ${{ if eq(parameters.buildNodejs, 'true') }}:
       - template: ../templates/nodejs-artifacts-package-and-publish-steps-posix.yml
@@ -138,7 +144,9 @@ stages:
     condition: succeeded()
     workspace:
       clean: all
-    pool: 'Onnxruntime-Linux-GPU'
+    pool:
+      name: 'Onnxruntime-Linux-GPU-A10'
+      os: linux
     variables:
     - template: ../templates/common-variables.yml
     - name: CUDA_VERSION_MAJOR
@@ -218,9 +226,9 @@ stages:
           /src_dir/onnxruntime-inference-examples/c_cxx/squeezenet/run_capi_application.sh -o /src_dir/onnxruntime -p /artifact_src/onnxruntime-linux-x64-gpu-$(OnnxRuntimeVersion).tgz -w /src_dir/onnxruntime-inference-examples/c_cxx/squeezenet
         workingDirectory: '$(Build.ArtifactStagingDirectory)'
 
-    - task: PublishPipelineArtifact@1
+    - task: 1ES.PublishPipelineArtifact@1
       inputs:
-        targetPath: '$(Build.ArtifactStagingDirectory)/onnxruntime-linux-x64-gpu-$(OnnxRuntimeVersion).tgz'
+        targetPath: '$(Build.ArtifactStagingDirectory)'
         artifactName: 'onnxruntime-linux-x64-gpu'
     - template: ../templates/component-governance-component-detection-steps.yml
       parameters:
diff --git a/tools/ci_build/github/azure-pipelines/stages/nuget-win-cuda-packaging-stage.yml b/tools/ci_build/github/azure-pipelines/stages/nuget-win-cuda-packaging-stage.yml
index bb6b52e16f165..53e4218ae6fd5 100644
--- a/tools/ci_build/github/azure-pipelines/stages/nuget-win-cuda-packaging-stage.yml
+++ b/tools/ci_build/github/azure-pipelines/stages/nuget-win-cuda-packaging-stage.yml
@@ -7,10 +7,6 @@ parameters:
   type: boolean
   default: false
 
-- name: DoCompliance
-  type: boolean
-  default: true
-
 - name: DoEsrp
   type: boolean
   default: true
@@ -34,7 +30,7 @@ parameters:
   displayName: Specific Artifact's BuildId
   type: string
   default: '0'
-  
+
 - name: buildJava
   type: boolean
 
@@ -43,7 +39,6 @@ stages:
 - template: ../templates/win-ci.yml
   parameters:
     ort_build_pool_name: 'onnxruntime-Win2022-GPU-A10'
-    DoCompliance: ${{ parameters.DoCompliance }}
     DoEsrp: ${{ parameters.DoEsrp }}
     stage_name_suffix: CUDA
     buildArch: x64
@@ -61,7 +56,6 @@ stages:
 - template: ../templates/win-ci.yml
   parameters:
     ort_build_pool_name: 'onnxruntime-Win2022-GPU-A10'
-    DoCompliance: ${{ parameters.DoCompliance }}
     DoEsrp: ${{ parameters.DoEsrp }}
     stage_name_suffix: TensorRT
     buildArch: x64
@@ -79,93 +73,94 @@ stages:
 # Windows CUDA Combined Testing and Publishing
 - stage: Windows_Packaging_combined_GPU
   dependsOn:
-    - Windows_Packaging_CUDA
-    - Windows_Packaging_TensorRT
+  - Windows_Packaging_CUDA
+  - Windows_Packaging_TensorRT
   condition: succeeded()
 
   jobs:
-    - job: Windows_Packaging_combined_GPU
-      workspace:
-        clean: all
-      pool: 'onnxruntime-Win2022-GPU-A10'
-      variables:
-        CUDA_MODULE_LOADINGL: 'LAZY'
-        GRADLE_OPTS: '-Dorg.gradle.daemon=false'
-      steps:
-        - checkout: self                           # due to checkout multiple repos, the root directory is $(Build.SourcesDirectory)/onnxruntime
-        - checkout: onnxruntime-inference-examples # due to checkout multiple repos, the root directory is $(Build.SourcesDirectory)/onnxruntime-inference-examples
-          submodules: false
-
-        - script: dir $(Build.SourcesDirectory)
-        - template: ../templates/jobs/download_win_gpu_library.yml
-          parameters:
-            DownloadCUDA: true
-            DownloadTRT: true
-            CudaVersion: ${{ parameters.CudaVersion }}
-
-        - template: ../templates/set-version-number-variables-step.yml
-          parameters:
-            versionFileDirectory: '$(Build.SourcesDirectory)\onnxruntime'
-            workingDirectory: '$(Build.SourcesDirectory)\onnxruntime'
-        - task: DownloadPipelineArtifact@2
-          displayName: 'Download Pipeline Artifact - onnxruntime-win-x64-cuda'
-          inputs:
-            artifactName: 'onnxruntime-win-x64-cuda'
-            targetPath: '$(Build.BinariesDirectory)/zip-artifacts'
-
-        - task: DownloadPipelineArtifact@2
-          displayName: 'Download Pipeline Artifact - onnxruntime-win-x64-tensorrt'
-          inputs:
-            artifactName: 'onnxruntime-win-x64-tensorrt'
-            targetPath: '$(Build.BinariesDirectory)/zip-artifacts'
-
-        - task: PowerShell@2
-          displayName: 'PowerShell Script'
-          inputs:
-            targetType: filePath
-            filePath: $(Build.SourcesDirectory)\onnxruntime\tools\ci_build\github\windows\extract_zip_files_gpu.ps1
-
-        - script: |
-            dir
-          workingDirectory: '$(Build.BinariesDirectory)/zip-artifacts'
-          displayName: 'List artifacts'
-
-        - task: BatchScript@1
-          displayName: 'Bundle CUDA/TRT EP binaries'
-          inputs:
-            filename: $(Build.SourcesDirectory)\onnxruntime\tools\ci_build\github\windows\bundle_dlls_gpu.bat
-            workingFolder: $(Build.BinariesDirectory)\zip-artifacts
-
-        - task: CopyFiles@2
-          displayName: 'Copy zip file to: $(Build.ArtifactStagingDirectory)'
-          inputs:
-            SourceFolder: '$(Build.BinariesDirectory)\zip-artifacts'
-            Contents: 'onnxruntime-win-x64-gpu-*.zip'
-            TargetFolder: '$(Build.ArtifactStagingDirectory)'
-
-        - template: ../templates/validate-package.yml
-          parameters:
-            PackageType: 'zip'
-            PackagePath: '$(Build.ArtifactStagingDirectory)'
-            PackageName: 'onnxruntime-win-x64-gpu-$(OnnxRuntimeVersion).zip'
-            ScriptPath: '$(Build.SourcesDirectory)\onnxruntime\tools\nuget\validate_package.py'
-            PlatformsSupported: 'win-x64'
-            VerifyNugetSigning: false
-            workingDirectory: '$(Build.ArtifactStagingDirectory)'
-
-        - task: BatchScript@1
-          displayName: 'Test C API application for GPU package'
-          inputs:
-            filename: $(Build.SourcesDirectory)\onnxruntime-inference-examples\c_cxx\squeezenet\run_capi_application.bat
-            arguments: $(Build.SourcesDirectory)\onnxruntime $(Build.ArtifactStagingDirectory)\onnxruntime-win-x64-gpu-$(OnnxRuntimeVersion).zip $(Build.SourcesDirectory)\onnxruntime-inference-examples\c_cxx\squeezenet
-            workingFolder: '$(Build.ArtifactStagingDirectory)'
-
-        - task: PublishPipelineArtifact@0
-          displayName: 'Publish Pipeline Combined GPU Package Artifact'
-          inputs:
-            artifactName: 'onnxruntime-win-x64-gpu'
-            targetPath: '$(Build.ArtifactStagingDirectory)/onnxruntime-win-x64-gpu-$(OnnxRuntimeVersion).zip'
-
-        - template: ../templates/component-governance-component-detection-steps.yml
-          parameters:
-            condition: 'succeeded'
+  - job: Windows_Packaging_combined_GPU
+    workspace:
+      clean: all
+    pool:
+      name: 'onnxruntime-Win2022-GPU-A10'
+    variables:
+      CUDA_MODULE_LOADINGL: 'LAZY'
+      GRADLE_OPTS: '-Dorg.gradle.daemon=false'
+    steps:
+    - checkout: self                           # due to checkout multiple repos, the root directory is $(Build.SourcesDirectory)/onnxruntime
+    - checkout: onnxruntime-inference-examples # due to checkout multiple repos, the root directory is $(Build.SourcesDirectory)/onnxruntime-inference-examples
+      submodules: false
+
+    - script: dir $(Build.SourcesDirectory)
+    - template: ../templates/jobs/download_win_gpu_library.yml
+      parameters:
+        DownloadCUDA: true
+        DownloadTRT: true
+        CudaVersion: ${{ parameters.CudaVersion }}
+
+    - template: ../templates/set-version-number-variables-step.yml
+      parameters:
+        versionFileDirectory: '$(Build.SourcesDirectory)\onnxruntime'
+        workingDirectory: '$(Build.SourcesDirectory)\onnxruntime'
+    - task: DownloadPipelineArtifact@2
+      displayName: 'Download Pipeline Artifact - onnxruntime-win-x64-cuda'
+      inputs:
+        artifactName: 'onnxruntime-win-x64-cuda'
+        targetPath: '$(Build.BinariesDirectory)/zip-artifacts'
+
+    - task: DownloadPipelineArtifact@2
+      displayName: 'Download Pipeline Artifact - onnxruntime-win-x64-tensorrt'
+      inputs:
+        artifactName: 'onnxruntime-win-x64-tensorrt'
+        targetPath: '$(Build.BinariesDirectory)/zip-artifacts'
+
+    - task: PowerShell@2
+      displayName: 'PowerShell Script'
+      inputs:
+        targetType: filePath
+        filePath: $(Build.SourcesDirectory)\onnxruntime\tools\ci_build\github\windows\extract_zip_files_gpu.ps1
+
+    - script: |
+        dir
+      workingDirectory: '$(Build.BinariesDirectory)/zip-artifacts'
+      displayName: 'List artifacts'
+
+    - task: BatchScript@1
+      displayName: 'Bundle CUDA/TRT EP binaries'
+      inputs:
+        filename: $(Build.SourcesDirectory)\onnxruntime\tools\ci_build\github\windows\bundle_dlls_gpu.bat
+        workingFolder: $(Build.BinariesDirectory)\zip-artifacts
+
+    - task: CopyFiles@2
+      displayName: 'Copy zip file to: $(Build.ArtifactStagingDirectory)'
+      inputs:
+        SourceFolder: '$(Build.BinariesDirectory)\zip-artifacts'
+        Contents: 'onnxruntime-win-x64-gpu-*.zip'
+        TargetFolder: '$(Build.ArtifactStagingDirectory)'
+
+    - template: ../templates/validate-package.yml
+      parameters:
+        PackageType: 'zip'
+        PackagePath: '$(Build.ArtifactStagingDirectory)'
+        PackageName: 'onnxruntime-win-x64-gpu-$(OnnxRuntimeVersion).zip'
+        ScriptPath: '$(Build.SourcesDirectory)\onnxruntime\tools\nuget\validate_package.py'
+        PlatformsSupported: 'win-x64'
+        VerifyNugetSigning: false
+        workingDirectory: '$(Build.ArtifactStagingDirectory)'
+
+    - task: BatchScript@1
+      displayName: 'Test C API application for GPU package'
+      inputs:
+        filename: $(Build.SourcesDirectory)\onnxruntime-inference-examples\c_cxx\squeezenet\run_capi_application.bat
+        arguments: $(Build.SourcesDirectory)\onnxruntime $(Build.ArtifactStagingDirectory)\onnxruntime-win-x64-gpu-$(OnnxRuntimeVersion).zip $(Build.SourcesDirectory)\onnxruntime-inference-examples\c_cxx\squeezenet
+        workingFolder: '$(Build.ArtifactStagingDirectory)'
+
+    - task: 1ES.PublishPipelineArtifact@1
+      displayName: 'Publish Pipeline Combined GPU Package Artifact'
+      inputs:
+        artifactName: 'onnxruntime-win-x64-gpu'
+        targetPath: '$(Build.ArtifactStagingDirectory)'
+
+    - template: ../templates/component-governance-component-detection-steps.yml
+      parameters:
+        condition: 'succeeded'
diff --git a/tools/ci_build/github/azure-pipelines/stages/set_packaging_variables_stage.yml b/tools/ci_build/github/azure-pipelines/stages/set_packaging_variables_stage.yml
index 2e4a673d72e00..8013396018ffa 100644
--- a/tools/ci_build/github/azure-pipelines/stages/set_packaging_variables_stage.yml
+++ b/tools/ci_build/github/azure-pipelines/stages/set_packaging_variables_stage.yml
@@ -8,6 +8,7 @@ stages:
   - job: Set_Variables
     pool:
       name: 'onnxruntime-Ubuntu2204-AMD-CPU'
+      os: 'linux'
     steps:
     - checkout: none
     - bash: |
@@ -48,6 +49,7 @@ stages:
   - job: D1
     pool:
       name: 'onnxruntime-Ubuntu2204-AMD-CPU'
+      os: 'linux'
     variables:
       MyVar: $[stageDependencies.Setup.Set_Variables.outputs['Set_Release_Version_Suffix.ReleaseVersionSuffix']]
       BuildDate: $[stageDependencies.Setup.Set_Variables.outputs['Set_Build_Date.BuildDate']]
diff --git a/tools/ci_build/github/azure-pipelines/templates/c-api-artifacts-package-and-publish-steps-posix.yml b/tools/ci_build/github/azure-pipelines/templates/c-api-artifacts-package-and-publish-steps-posix.yml
index 602510424c1a7..c8c20b6a15728 100644
--- a/tools/ci_build/github/azure-pipelines/templates/c-api-artifacts-package-and-publish-steps-posix.yml
+++ b/tools/ci_build/github/azure-pipelines/templates/c-api-artifacts-package-and-publish-steps-posix.yml
@@ -1,11 +1,11 @@
 # sets up common build tools for the windows build machines before build
 
 parameters:
-- name: buildConfig  
+- name: buildConfig
   type: string
   default: 'Release'
 
-- name: artifactName  
+- name: artifactName
   type: string
   default: 'onnxruntime-linux-x64'
 
@@ -13,28 +13,28 @@ parameters:
   type: string
   default: 'onnxruntime-linux-x64'
 
-- name: libraryName  
+- name: libraryName
   type: string
   default: 'libonnxruntime.so'
-  
+
 steps:
-    - task: ShellScript@2
-      displayName: 'Copy build artifacts for zipping'
-      inputs:
-        scriptPath: 'tools/ci_build/github/linux/copy_strip_binary.sh'
-        args: '-r $(Build.BinariesDirectory) -a ${{parameters.artifactName}} -l ${{parameters.libraryName}} -c ${{parameters.buildConfig}} -s $(Build.SourcesDirectory) -t $(Build.SourceVersion)'
-        workingDirectory: '$(Build.BinariesDirectory)/${{parameters.buildConfig}}'
+- task: ShellScript@2
+  displayName: 'Copy build artifacts for zipping'
+  inputs:
+    scriptPath: 'tools/ci_build/github/linux/copy_strip_binary.sh'
+    args: '-r $(Build.BinariesDirectory) -a ${{parameters.artifactName}} -l ${{parameters.libraryName}} -c ${{parameters.buildConfig}} -s $(Build.SourcesDirectory) -t $(Build.SourceVersion)'
+    workingDirectory: '$(Build.BinariesDirectory)/${{parameters.buildConfig}}'
 
-    - task: ArchiveFiles@2
-      inputs:
-        rootFolderOrFile: '$(Build.BinariesDirectory)/${{parameters.artifactName}}'
-        includeRootFolder: true
-        archiveType: 'tar' # Options: zip, 7z, tar, wim
-        tarCompression: 'gz'
-        archiveFile: '$(Build.ArtifactStagingDirectory)/${{parameters.artifactName}}.tgz'
-        replaceExistingArchive: true
+- task: ArchiveFiles@2
+  inputs:
+    rootFolderOrFile: '$(Build.BinariesDirectory)/${{parameters.artifactName}}'
+    includeRootFolder: true
+    archiveType: 'tar' # Options: zip, 7z, tar, wim
+    tarCompression: 'gz'
+    archiveFile: '$(Build.ArtifactStagingDirectory)/${{parameters.artifactName}}.tgz'
+    replaceExistingArchive: true
 
-    - task: PublishPipelineArtifact@1
-      inputs:
-        targetPath: '$(Build.ArtifactStagingDirectory)'
-        artifactName: '${{parameters.artifactNameNoVersionString}}'
+- task: 1ES.PublishPipelineArtifact@1
+  inputs:
+    targetPath: '$(Build.ArtifactStagingDirectory)'
+    artifactName: '${{parameters.artifactNameNoVersionString}}'
diff --git a/tools/ci_build/github/azure-pipelines/templates/c-api-artifacts-package-and-publish-steps-windows.yml b/tools/ci_build/github/azure-pipelines/templates/c-api-artifacts-package-and-publish-steps-windows.yml
index e1a514ea54123..046c737a2b151 100644
--- a/tools/ci_build/github/azure-pipelines/templates/c-api-artifacts-package-and-publish-steps-windows.yml
+++ b/tools/ci_build/github/azure-pipelines/templates/c-api-artifacts-package-and-publish-steps-windows.yml
@@ -111,7 +111,7 @@ steps:
         archiveFile: '$(Build.ArtifactStagingDirectory)\${{parameters.artifactName}}.zip'
         replaceExistingArchive: true
 
-    - task: PublishPipelineArtifact@1
+    - task: 1ES.PublishPipelineArtifact@1
       inputs:
-        targetPath: '$(Build.ArtifactStagingDirectory)\${{parameters.artifactName}}.zip'
+        targetPath: '$(Build.ArtifactStagingDirectory)'
         artifactName: '${{parameters.artifactNameNoVersionString}}'
diff --git a/tools/ci_build/github/azure-pipelines/templates/c-api-cpu.yml b/tools/ci_build/github/azure-pipelines/templates/c-api-cpu.yml
index a6fe5ac27749b..abd781c2ea42a 100644
--- a/tools/ci_build/github/azure-pipelines/templates/c-api-cpu.yml
+++ b/tools/ci_build/github/azure-pipelines/templates/c-api-cpu.yml
@@ -3,12 +3,6 @@ parameters:
   displayName: Run Tests?
   type: boolean
   default: true
-
-- name: DoCompliance
-  displayName: Run Compliance Tasks?
-  type: boolean
-  default: true
-
 - name: DoEsrp
   displayName: Run code sign tasks? Must be true if you are doing an Onnx Runtime release.
   type: boolean
@@ -163,7 +157,6 @@ stages:
 
 - template: win-ci.yml
   parameters:
-    DoCompliance: ${{ parameters.DoCompliance }}
     DoEsrp: ${{ parameters.DoEsrp }}
     stage_name_suffix: CPU_x86_${{ parameters.BuildVariant }}
     buildArch: x86
@@ -176,7 +169,6 @@ stages:
 
 - template: win-ci.yml
   parameters:
-    DoCompliance: ${{ parameters.DoCompliance }}
     DoEsrp: ${{ parameters.DoEsrp }}
     stage_name_suffix: CPU_arm64_${{ parameters.BuildVariant }}
     buildArch: x64
@@ -189,7 +181,6 @@ stages:
 
 - template: win-ci.yml
   parameters:
-    DoCompliance: ${{ parameters.DoCompliance }}
     DoEsrp: ${{ parameters.DoEsrp }}
     stage_name_suffix: CPU_x64_${{ parameters.BuildVariant }}
     buildArch: x64
diff --git a/tools/ci_build/github/azure-pipelines/templates/c-api-linux-cpu.yml b/tools/ci_build/github/azure-pipelines/templates/c-api-linux-cpu.yml
index 330369ed0cc7a..e25ba88daa98a 100644
--- a/tools/ci_build/github/azure-pipelines/templates/c-api-linux-cpu.yml
+++ b/tools/ci_build/github/azure-pipelines/templates/c-api-linux-cpu.yml
@@ -35,68 +35,72 @@ jobs:
 
   workspace:
     clean: all
-  timeoutInMinutes:  210
-  pool: ${{parameters.PoolName}}
+  timeoutInMinutes: 210
+  pool:
+    name: ${{parameters.PoolName}}
+    os: linux
+    ${{ if eq(parameters.OnnxruntimeArch, 'aarch64') }}:
+      hostArchitecture: Arm64
   steps:
-    - checkout: self
-      clean: true
-      submodules: none
-    - template: set-version-number-variables-step.yml
-    - ${{ if eq(parameters.OnnxruntimeArch, 'x64') }}:
-      - template: get-docker-image-steps.yml
-        parameters:
-          Dockerfile: tools/ci_build/github/linux/docker/inference/x86_64/default/cpu/Dockerfile
-          Context: tools/ci_build/github/linux/docker/inference/x86_64/default/cpu
-          DockerBuildArgs: "--build-arg BUILD_UID=$( id -u )"
-          Repository: onnxruntimecpubuildcentos8${{parameters.OnnxruntimeArch}}_packaging
-
-    - ${{ if eq(parameters.OnnxruntimeArch, 'aarch64') }}:
-      - template: get-docker-image-steps.yml
-        parameters:
-          Dockerfile: tools/ci_build/github/linux/docker/inference/aarch64/default/cpu/Dockerfile
-          Context: tools/ci_build/github/linux/docker/inference/aarch64/default/cpu
-          DockerBuildArgs: "--build-arg BUILD_UID=$( id -u )"
-          Repository: onnxruntimecpubuildcentos8${{parameters.OnnxruntimeArch}}_packaging
+  - checkout: self
+    clean: true
+    submodules: none
+  - template: set-version-number-variables-step.yml
+  - ${{ if eq(parameters.OnnxruntimeArch, 'x64') }}:
+    - template: get-docker-image-steps.yml
+      parameters:
+        Dockerfile: tools/ci_build/github/linux/docker/inference/x86_64/default/cpu/Dockerfile
+        Context: tools/ci_build/github/linux/docker/inference/x86_64/default/cpu
+        DockerBuildArgs: "--build-arg BUILD_UID=$( id -u )"
+        Repository: onnxruntimecpubuildcentos8${{parameters.OnnxruntimeArch}}_packaging
 
-    - task: CmdLine@2
-      inputs:
-        script: |
-          set -e -x
-          mkdir -p $HOME/.onnx
-          docker run -e SYSTEM_COLLECTIONURI --rm --volume /data/onnx:/data/onnx:ro --volume $(Build.SourcesDirectory):/onnxruntime_src --volume $(Build.BinariesDirectory):/build \
-          --volume $HOME/.onnx:/home/onnxruntimedev/.onnx -e NIGHTLY_BUILD onnxruntimecpubuildcentos8${{parameters.OnnxruntimeArch}}_packaging /bin/bash -c "python3 \
-          /onnxruntime_src/tools/ci_build/build.py --enable_lto --build_java --build_nodejs --build_dir /build --config Release \
-          --skip_submodule_sync --parallel --use_vcpkg --use_vcpkg_ms_internal_asset_cache --use_binskim_compliant_compile_flags --use_vcpkg --use_vcpkg_ms_internal_asset_cache --build_shared_lib ${{ parameters.AdditionalBuildFlags }} && cd /build/Release && make install DESTDIR=/build/installed"
-          mkdir $(Build.ArtifactStagingDirectory)/testdata
-          cp $(Build.BinariesDirectory)/Release/libcustom_op_library.so* $(Build.ArtifactStagingDirectory)/testdata
-          ls -al $(Build.ArtifactStagingDirectory)
-      displayName: 'Create Artifacts'
+  - ${{ if eq(parameters.OnnxruntimeArch, 'aarch64') }}:
+    - template: get-docker-image-steps.yml
+      parameters:
+        Dockerfile: tools/ci_build/github/linux/docker/inference/aarch64/default/cpu/Dockerfile
+        Context: tools/ci_build/github/linux/docker/inference/aarch64/default/cpu
+        DockerBuildArgs: "--build-arg BUILD_UID=$( id -u )"
+        Repository: onnxruntimecpubuildcentos8${{parameters.OnnxruntimeArch}}_packaging
 
-    - ${{ if eq(parameters.PackageJava, 'true') }}:
-      - template: java-api-artifacts-package-and-publish-steps-posix.yml
-        parameters:
-          arch: 'linux-${{parameters.OnnxruntimeArch}}'
-          buildConfig: 'Release'
-          artifactName: 'onnxruntime-java-linux-${{parameters.OnnxruntimeArch}}'
-          version: '$(OnnxRuntimeVersion)'
-          libraryName: 'libonnxruntime.so'
-          nativeLibraryName: 'libonnxruntime4j_jni.so'
+  - task: CmdLine@2
+    inputs:
+      script: |
+        set -e -x
+        mkdir -p $HOME/.onnx
+        docker run -e SYSTEM_COLLECTIONURI --rm --volume /data/onnx:/data/onnx:ro --volume $(Build.SourcesDirectory):/onnxruntime_src --volume $(Build.BinariesDirectory):/build \
+        --volume $HOME/.onnx:/home/onnxruntimedev/.onnx -e NIGHTLY_BUILD onnxruntimecpubuildcentos8${{parameters.OnnxruntimeArch}}_packaging /bin/bash -c "python3 \
+        /onnxruntime_src/tools/ci_build/build.py --enable_lto --build_java --build_nodejs --build_dir /build --config Release \
+        --skip_submodule_sync --parallel --use_vcpkg --use_vcpkg_ms_internal_asset_cache --use_binskim_compliant_compile_flags --use_vcpkg --use_vcpkg_ms_internal_asset_cache --build_shared_lib ${{ parameters.AdditionalBuildFlags }} && cd /build/Release && make install DESTDIR=/build/installed"
+        mkdir $(Build.ArtifactStagingDirectory)/testdata
+        cp $(Build.BinariesDirectory)/Release/libcustom_op_library.so* $(Build.ArtifactStagingDirectory)/testdata
+        ls -al $(Build.ArtifactStagingDirectory)
+    displayName: 'Create Artifacts'
 
-    - template: c-api-artifacts-package-and-publish-steps-posix.yml
+  - ${{ if eq(parameters.PackageJava, 'true') }}:
+    - template: java-api-artifacts-package-and-publish-steps-posix.yml
       parameters:
-          buildConfig: 'Release'
-          artifactName: '${{parameters.ArtifactNamePrefix}}-linux-${{parameters.OnnxruntimeArch}}-$(OnnxRuntimeVersion)'
-          artifactNameNoVersionString: '${{parameters.ArtifactNamePrefix}}-linux-${{parameters.OnnxruntimeArch}}'
-          libraryName: 'libonnxruntime.so.$(OnnxRuntimeVersion)'
+        arch: 'linux-${{parameters.OnnxruntimeArch}}'
+        buildConfig: 'Release'
+        artifactName: 'onnxruntime-java-linux-${{parameters.OnnxruntimeArch}}'
+        version: '$(OnnxRuntimeVersion)'
+        libraryName: 'libonnxruntime.so'
+        nativeLibraryName: 'libonnxruntime4j_jni.so'
 
-    - ${{ if eq(parameters.PackageNodejs, 'true') }}:
-      - template: nodejs-artifacts-package-and-publish-steps-posix.yml
-        parameters:
-          arch: '${{parameters.OnnxruntimeNodejsBindingArch}}'
-          os: 'linux'
-          artifactName: 'drop-onnxruntime-nodejs-linux-${{parameters.OnnxruntimeArch}}'
+  - template: c-api-artifacts-package-and-publish-steps-posix.yml
+    parameters:
+      buildConfig: 'Release'
+      artifactName: '${{parameters.ArtifactNamePrefix}}-linux-${{parameters.OnnxruntimeArch}}-$(OnnxRuntimeVersion)'
+      artifactNameNoVersionString: '${{parameters.ArtifactNamePrefix}}-linux-${{parameters.OnnxruntimeArch}}'
+      libraryName: 'libonnxruntime.so.$(OnnxRuntimeVersion)'
 
-    - ${{ if not(eq(parameters.OnnxruntimeNodejsBindingArch, 'arm64')) }}:
-      - template: component-governance-component-detection-steps.yml
-        parameters:
-          condition: 'succeeded'
+  - ${{ if eq(parameters.PackageNodejs, 'true') }}:
+    - template: nodejs-artifacts-package-and-publish-steps-posix.yml
+      parameters:
+        arch: '${{parameters.OnnxruntimeNodejsBindingArch}}'
+        os: 'linux'
+        artifactName: 'drop-onnxruntime-nodejs-linux-${{parameters.OnnxruntimeArch}}'
+
+  - ${{ if not(eq(parameters.OnnxruntimeNodejsBindingArch, 'arm64')) }}:
+    - template: component-governance-component-detection-steps.yml
+      parameters:
+        condition: 'succeeded'
diff --git a/tools/ci_build/github/azure-pipelines/templates/final-jar-testing.yml b/tools/ci_build/github/azure-pipelines/templates/final-jar-testing.yml
index 8ccba213af04a..d893cac8ef358 100644
--- a/tools/ci_build/github/azure-pipelines/templates/final-jar-testing.yml
+++ b/tools/ci_build/github/azure-pipelines/templates/final-jar-testing.yml
@@ -26,9 +26,17 @@ stages:
       clean: all
     ${{ if eq(parameters.OS, 'MacOS') }}:
       pool:
-        vmImage: ${{ parameters.PoolName }}
-    ${{ else }}:
-      pool: ${{ parameters.PoolName }}
+        name: 'Azure Pipelines'
+        image: macOS-13
+        os: macOS
+    ${{ if eq(parameters.OS, 'Linux') }}:
+      pool:
+        name: ${{ parameters.PoolName }}
+        os: linux
+    ${{ if eq(parameters.OS, 'Windows') }}:
+      pool:
+        name: ${{ parameters.PoolName }}
+        os: windows
     variables:
     - name: runCodesignValidationInjection
       value: false
@@ -88,6 +96,6 @@ stages:
       - template: use-xcode-version.yml
 
     - template: component-governance-component-detection-steps.yml
-      parameters :
-        condition : 'succeeded'
+      parameters:
+        condition: 'succeeded'
 
diff --git a/tools/ci_build/github/azure-pipelines/templates/java-api-artifacts-package-and-publish-steps-posix.yml b/tools/ci_build/github/azure-pipelines/templates/java-api-artifacts-package-and-publish-steps-posix.yml
index 6b469c1a2a551..1c4b0ae5f4137 100644
--- a/tools/ci_build/github/azure-pipelines/templates/java-api-artifacts-package-and-publish-steps-posix.yml
+++ b/tools/ci_build/github/azure-pipelines/templates/java-api-artifacts-package-and-publish-steps-posix.yml
@@ -7,15 +7,22 @@ parameters:
   libraryName: 'libonnxruntime.so'
   nativeLibraryName: 'libonnxruntime4j_jni.so'
   version: ''
+  is1ES: false
 steps:
-    - task: ShellScript@2
-      displayName: 'Copy build artifacts for zipping'
-      inputs:
-        scriptPath: 'tools/ci_build/github/linux/java_copy_strip_binary.sh'
-        args: '-r $(Build.BinariesDirectory) -c ${{parameters.buildConfig}} -a ${{parameters.artifactName}} -l ${{parameters.libraryName}} -n ${{parameters.nativeLibraryName}} -v ${{parameters.version}} -h ${{parameters.arch}}'
-        workingDirectory: '$(Build.BinariesDirectory)/${{parameters.buildConfig}}'    
+- task: ShellScript@2
+  displayName: 'Copy build artifacts for zipping'
+  inputs:
+    scriptPath: 'tools/ci_build/github/linux/java_copy_strip_binary.sh'
+    args: '-r $(Build.BinariesDirectory) -c ${{parameters.buildConfig}} -a ${{parameters.artifactName}} -l ${{parameters.libraryName}} -n ${{parameters.nativeLibraryName}} -v ${{parameters.version}} -h ${{parameters.arch}}'
+    workingDirectory: '$(Build.BinariesDirectory)/${{parameters.buildConfig}}'
 
-    - task: PublishBuildArtifacts@1
-      inputs:
-        pathtoPublish: '$(Build.BinariesDirectory)/${{parameters.artifactName}}'
-        artifactName: 'drop-${{parameters.artifactName}}'
+- ${{ if eq(parameters.is1ES, true) }}:
+  - task: 1ES.PublishPipelineArtifact@1
+    inputs:
+      targetPath: '$(Build.BinariesDirectory)/${{parameters.artifactName}}'
+      artifactName: 'drop-${{parameters.artifactName}}'
+- ${{ if eq(parameters.is1ES, false) }}:
+  - task: PublishBuildArtifacts@1
+    inputs:
+      pathtoPublish: '$(Build.BinariesDirectory)/${{parameters.artifactName}}'
+      artifactName: 'drop-${{parameters.artifactName}}'
diff --git a/tools/ci_build/github/azure-pipelines/templates/win-ci.yml b/tools/ci_build/github/azure-pipelines/templates/win-ci.yml
index 69a06c3db24b8..e8a1395474634 100644
--- a/tools/ci_build/github/azure-pipelines/templates/win-ci.yml
+++ b/tools/ci_build/github/azure-pipelines/templates/win-ci.yml
@@ -177,10 +177,10 @@ stages:
             ${{ else }}:
               buildOnly: false
 
-        - task: PublishBuildArtifacts@1
+        - task: 1ES.PublishPipelineArtifact@1
           displayName: 'Publish Java temp binaries'
           inputs:
-            pathtoPublish: '$(Build.BinariesDirectory)\onnxruntime-java-win-${{ parameters.msbuildPlatform }}'
+            targetPath: '$(Build.BinariesDirectory)\onnxruntime-java-win-${{ parameters.msbuildPlatform }}'
             artifactName: 'drop-onnxruntime-java-win-${{ parameters.packageName }}${{parameters.artifact_name_suffix}}'
         # All GPU builds will be tested in the next stage with GPU machine
       - ${{ if contains(parameters.ort_build_pool_name, 'CPU') }}:
@@ -213,11 +213,10 @@ stages:
             displayName: 'Copy java pad and folder for java test'
             workingDirectory: '$(Build.BinariesDirectory)'
 
-        - task: PublishPipelineArtifact@1
+        - task: 1ES.PublishPipelineArtifact@1
           inputs:
             targetPath: '$(Agent.TempDirectory)/RelWithDebInfo'
             artifactName: 'Windows_Packaging_${{ parameters.stage_name_suffix }}_build_artifacts'
-            publishLocation: 'pipeline'
 
       - script: |
           dir *.dll
@@ -248,34 +247,6 @@ stages:
           Contents: 'custom_op_library.dll'
           TargetFolder: '$(Build.ArtifactStagingDirectory)/testdata'
 
-      - ${{ if eq(parameters['DoCompliance'], 'true') }}:
-        - task: CredScan@3
-          displayName: 'Run CredScan'
-          inputs:
-            debugMode: false
-          continueOnError: true
-
-        - task: BinSkim@4
-          displayName: 'Run BinSkim'
-          inputs:
-            AnalyzeTargetGlob: '$(Build.BinariesDirectory)\RelWithDebInfo\RelWithDebInfo\**\*.dll'
-          continueOnError: true
-
-        - task: PostAnalysis@2
-          inputs:
-            GdnBreakAllTools: false
-            GdnBreakGdnToolBinSkim: true
-            GdnBreakPolicy: M365
-            GdnBreakPolicyMinSev: Error
-
-        - task: TSAUpload@2
-          displayName: 'TSA upload'
-          condition: and (succeeded(), eq(variables['Build.SourceBranch'], 'refs/heads/main'))
-          inputs:
-            GdnPublishTsaOnboard: false
-            GdnPublishTsaConfigFile: '$(Build.sourcesDirectory)\.gdn\.gdntsa'
-          continueOnError: true
-
       - template: component-governance-component-detection-steps.yml
         parameters :
           condition : 'succeeded'