diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 198ea7ad9d..3c1c32103d 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -36,9 +36,11 @@ on:
branches: [main]
paths:
- 'src/**'
+ - 'tests/**'
pull_request:
paths:
- 'src/**'
+ - 'tests/**'
schedule:
- cron: "0 0 * * *"
workflow_dispatch:
@@ -66,6 +68,7 @@ jobs:
# Use only 'java' to analyze code written in Java, Kotlin or both
# Use only 'javascript' to analyze code written in JavaScript, TypeScript or both
# Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
+ dotnet-version: ['9.0']
steps:
- name: Checkout repository
@@ -83,6 +86,12 @@ jobs:
# For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
queries: +security-extended,security-and-quality
+ # This is needed because codeQl currently only supports .NET8
+ - name: Setup .NET Core SDK ${{ matrix.dotnet-version }}
+ uses: actions/setup-dotnet@3e891b0cb619bf60e2c25674b222b8940e2c1c25 # v4.1.0
+ with:
+ dotnet-version: ${{ matrix.dotnet-version }}
+
# Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).
# Automates dependency installation for Python, Ruby, and JavaScript, optimizing the CodeQL analysis setup.
# If this step fails, then you should remove it and run the build manually (see below)
diff --git a/.github/workflows/dependencies.yaml b/.github/workflows/dependencies.yaml
index 686e10d90e..bb9e8cedc2 100644
--- a/.github/workflows/dependencies.yaml
+++ b/.github/workflows/dependencies.yaml
@@ -61,8 +61,6 @@ jobs:
uses: actions/setup-dotnet@3951f0dfe7a07e2313ec93c75700083e2005cbab # v4.3.0
with:
dotnet-version: ${{ matrix.dotnet-version }}
- # change to preview .NET 9 until fix for https://github.com/NuGet/Home/issues/12954 gets released for .NET 8
- dotnet-quality: 'preview'
- name: Checkout repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
diff --git a/tests/framework/Framework.Tests.Shared/Framework.Tests.Shared.csproj b/tests/framework/Framework.Tests.Shared/Framework.Tests.Shared.csproj
index 1bafacdb5f..9e1d546a73 100644
--- a/tests/framework/Framework.Tests.Shared/Framework.Tests.Shared.csproj
+++ b/tests/framework/Framework.Tests.Shared/Framework.Tests.Shared.csproj
@@ -32,7 +32,7 @@
-
+