Collect CodeQL info for OSX ARM64

.ado/publish.yml

@@ -41,14 +41,29 @@ jobs:
   - ${{ each matrixEntry in parameters.buildMatrix }}:
     - job: buildAOTBinary${{ matrixEntry.Name }}
       displayName: Build ${{ matrixEntry.TargetRuntime }} AOT binary
+      cancelTimeoutInMinutes: 45 # to allow more time to collect CodeQL debug info.
 
       variables:
         DotNetMoniker: net8.0
+        # Temporary variables to collect CodeQL info to debug OSX ARM64 build issue.
+        # They must be removed as soon as they not needed to save storage.
+        ${{ if eq( matrixEntry.TargetRuntime, 'osx-arm64' ) }}:
+          Codeql.PublishDatabaseLog: true
+          Codeql.Cadence: 0
 
       pool:
         vmImage: ${{ matrixEntry.VMImage }}
 
       steps:
+        # To debug OSX ARM64 CodeQL build issue.
+        - script: csrutil status
+          displayName: System Integrity Protection status
+          condition: eq( '${{ matrixEntry.TargetRuntime }}', 'osx-arm64' )
+
+        - script: echo "Codeql.PublishDatabaseLog = ${{ variables['Codeql.PublishDatabaseLog'] }}; Codeql.Cadence = ${{ variables['Codeql.Cadence'] }}"
+          displayName: Print CodeQL debug info variable
+          condition: eq( '${{ matrixEntry.TargetRuntime }}', 'osx-arm64' )
+
         - checkout: self
           displayName: Deep git fetch for version generation
           fetchDepth: 0 # Use deep fetch for the version calculation by Nerdbank.GitVersioning