I had to customize sdl parameters in each pipeline which meant instead of using the template provided by Brandon, I just used the pipeline file behind the template from here.
The signing step for the json cli tool wasn't working so I'm commenting it out for now, and will get it working later. Currently getting codeql up and running is higher priority. We only need to sign this when making changes to the json cli tool and releasing it.
I had to customize sdl parameters in each pipeline which meant instead of using the template provided by Brandon, I just used the pipeline file behind the template from here.
The sdl params I had to customize are the codeql language parameter so that I can force the root pipeline to only generate a database for javascript, and the json cli tool pipeline to only generate a database for csharp. Details about the language parameter are here: https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/codeql/1es-codeql
The signing step for the json cli tool wasn't working so I'm commenting it out for now, and will get it working later. Currently getting codeql up and running is higher priority. We only need to sign this when making changes to the json cli tool and releasing it.