hmmmmm

.github/workflows/build.yml

@@ -29,11 +29,20 @@ on:
         type: string
         # options:
         #   - x64
+      codeql:
+        required: false
+        default: false
+        type: bool
+        # options:
+        #   - true
+        #   - false
+
 
 permissions:
   actions: read
   contents: read
-  security-events: write  # For CodeQL
+  if: inputs.codeql
+    security-events: write  # For CodeQL
 
 jobs:
   build:
@@ -96,7 +105,7 @@ jobs:
         symbolServiceUrl: 'https://artifacts.dev.azure.com'
         personalAccessToken: ${{ secrets.AZDO_PAT }}
     - name: Perform CodeQL Analysis
-      if: ${{ github.event_name == 'schedule' }}
+      if: inputs.codeql
       uses: github/codeql-action/analyze@v3
       with:
         category: "/language:c-cpp"

.github/workflows/ci.yml

@@ -34,11 +34,18 @@ jobs:
         os: [2019, 2022]
         config: [Release, Debug]
         arch: [x64]
+    permissions:
+      actions: read
+      contents: read
+      if: ${{ github.event_name == 'schedule' }}
+        security-events: write  # For CodeQL
     uses: ./.github/workflows/build.yml
     with:
       config: ${{ matrix.config }}
       os: ${{ matrix.os }}
       arch: ${{ matrix.arch }}
+      if: ${{ github.event_name == 'schedule' }}
+        codeql: true
 
   functional_tests:
     name: Functional Tests