Disable CodeQL for courtesy and hotfixes (#19792)

microsoft · Apr 18, 2024 · 83f81a0 · 83f81a0
1 parent c62a428
commit 83f81a0
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 5 deletions.
diff --git a/azure-pipelines.yml b/azure-pipelines.yml
@@ -65,11 +65,6 @@ extends:
     sdl:
       sbom:
         enabled: false
-      ${{ eq(parameters.enableCodeQL, true) }}:
-        codeql:
-          compiled:
-            enabled: ${{ variables.runCodeQl }}
-            justificationForDisabling: 'Disabling to not scan AzureDevOpsRepo'
       baseline:
         baselineSet: default
         baselineFile: $(Build.SourcesDirectory)/.gdn/.gdnbaselines

diff --git a/ci/build-single-jobs.yml b/ci/build-single-jobs.yml
@@ -37,6 +37,8 @@ jobs:
   - job: create_hotfix
     displayName: Create HotFix PR
     dependsOn: build_single_task
+    variables:
+      ONEES_ENFORCED_CODEQL_ENABLED: ${{ eq(parameters.enableCodeQL, true) }}
     pool: 
       name: 1ES-ABTT-Shared-Pool
       image: abtt-windows-2022
@@ -51,6 +53,8 @@ jobs:
     - job: create_ado_pr
       displayName: Update UnifiedDependencies.xml
       dependsOn: build_single_task
+      variables:
+        ONEES_ENFORCED_CODEQL_ENABLED: ${{ eq(parameters.enableCodeQL, true) }}
       pool: 
         name: 1ES-ABTT-Shared-Pool
         image: abtt-windows-2022