Fixup CodeQL3000 injection (#91)

* Fixup CodeQL3000 injection

* Typo

* Fixup

* Update tsaoptions.json

.azure/default-build.yml

@@ -66,6 +66,10 @@ jobs:
         condition: eq( variables['Agent.OS'], 'Windows_NT' )
         displayName: Run tests
 
+    - script: "echo ##vso[build.addbuildtag]CodeQL3000"
+      displayName: 'Set CI CodeQL3000 tag'
+      condition: ne(variables.CODEQL_DIST,'')
+
     - ${{ parameters.afterBuild }}
 
     - task: PublishTestResults@2

.config/tsaoptions.json

@@ -0,0 +1,12 @@
+{
+  "areaPath": "DevDiv\\ASP.NET OOB\\SignalR",
+  "codebaseName": "SignalR-Client-Cpp",
+  "instanceUrl": "https://devdiv.visualstudio.com/",
+  "iterationPath": "DevDiv",
+  "notificationAliases": [
+    "aspnetcore-build@microsoft.com"
+  ],
+  "projectName": "DEVDIV",
+  "repositoryName": "SignalR-Client-Cpp",
+  "template": "TFSDEVDIV"
+}

azure-pipelines.yml

@@ -16,10 +16,19 @@ variables:
     value: true
   - name: _BuildConfig
     value: 'Debug'
-  - name: Codeql.Enabled
-    value: true
-  # used for post-build phases, internal builds only
   - ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
+    - name: Codeql.Enabled
+      value: true
+    # Run once per week
+    - name: Codeql.Cadence
+      value: 168
+    - name: Codeql.SourceRoot
+      value: src
+    - name: Codeql.TSAEnabled
+      value: true
+    - name: Codeql.TSAOptionsPath
+      value: '$(Build.SourcesDirectory)/.config/tsaoptions.json'
+    # used for post-build phases, internal builds only
     - group: DotNet-AspNet-SDLValidation-Params
 
 trigger: