Disable CodeQL from pipeline level and add it in job level

azure-pipelines.yml

@@ -61,6 +61,10 @@ extends:
           - repository: AppHostingSdkV4
           - repository: AndroidAppHostingSdk
           - repository: IOSAppHostingSdk
+      codeql:
+        compiled:
+          enabled: false
+          justificationForDisabling: 'CodeQL has some known issues with arm64 macos. Disabling auto-injection and using manual task instead'
     customBuildTags:
       - ES365AIMigrationTooling
     stages:

tools/yaml-templates/android-test.yml

@@ -58,6 +58,10 @@ steps:
       script: 'nohup pnpm start-test-app &'
       workingDirectory: '$(ClientSdkProjectDirectory)'
 
+  - task: CodeQL3000Init@0
+    inputs:
+        Enabled: true
+
   - task: Bash@3
     displayName: 'Install Emulator'
     # This task is flaky, but when it works it almost always completes in under 5 minutes.
@@ -88,6 +92,9 @@ steps:
       script: 'chmod u+x ./gradlew && chmod u+x e2eTest.sh && ./e2eTest.sh ${{ parameters.shardNum }} ${{ parameters.shardIndex }}'
       workingDirectory: '$(Agent.BuildDirectory)/androidHost/apps/orangeandroid'
 
+  - task: CodeQL3000Finalize@0
+    condition: always()
+
   - task: Bash@3
     displayName: 'Pull Test Artifacts'
     inputs:

tools/yaml-templates/build-app-host.yml

@@ -73,6 +73,10 @@ steps:
     workingDirectory: '$(AppHostingSdkProjectDirectory)'
     condition: eq(variables.CYPRESS_CACHE_RESTORED, 'false')
 
+  - task: CodeQL3000Init@0
+    inputs:
+      Enabled: true
+
   - script: |
       pnpm build
     displayName: 'Build app hosting sdk'
@@ -87,11 +91,14 @@ steps:
       pnpm build-force-blazor
     displayName: 'Build client sdk'
     workingDirectory: '$(ClientSdkProjectDirectory)'
-
+    
   - task: CmdLine@2
     displayName: 'Configure host machine'
     inputs:
       script: |
         sudo chmod -R 755 ./ 
         pnpm run setup
       workingDirectory: '$(AppHostingSdkProjectDirectory)'
+
+  - task: CodeQL3000Finalize@0
+    condition: always()

tools/yaml-templates/ios-test.yml

@@ -87,6 +87,10 @@ steps:
       script: 'nohup pnpm start-test-app --server-options-cert $(localhostSSLCertificate.secureFilePath) --server-options-key $(localhostSSLKey.secureFilePath) &'
       workingDirectory: '$(ClientSdkProjectDirectory)'
 
+  - task: CodeQL3000Init@0
+    inputs:
+      Enabled: true
+
   # Ideally, iOS Host SDK will be built as a dependency before running E2E Test, but there is no harm to build it again for a minute.
   # In practice, building iOS Host SDK before E2E test reduces flaky failure rate comparing to run E2E test directly.
   - task: Xcode@5
@@ -100,7 +104,10 @@ steps:
       xcWorkspacePath: '/Users/runner/work/1/iOSHost/$(IOSSdkWorkspace).xcworkspace'
       xcodeVersion: 'default'
       xcodeBuildArguments: 'CODE_SIGNING_ALLOWED=NO clean build -derivedDataPath "$(agent.buildDirectory)/iOS/DerivedData"'
-
+
+  - task: CodeQL3000Finalize@0
+    condition: always()
+
   - task: Bash@3
     displayName: 'Disable Slow Animation'
     inputs: