From 42e0426360bcd8a9facbe2f4110d4b70a8d1ac4c Mon Sep 17 00:00:00 2001
From: Vladimir Morozov <vmorozov@microsoft.com>
Date: Mon, 15 Jul 2024 11:07:42 -0700
Subject: [PATCH] Collect CodeQL info for OSX ARM64

---
 .ado/publish.yml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/.ado/publish.yml b/.ado/publish.yml
index 1930649c..49c340af 100644
--- a/.ado/publish.yml
+++ b/.ado/publish.yml
@@ -41,14 +41,29 @@ jobs:
   - ${{ each matrixEntry in parameters.buildMatrix }}:
     - job: buildAOTBinary${{ matrixEntry.Name }}
       displayName: Build ${{ matrixEntry.TargetRuntime }} AOT binary
+      cancelTimeoutInMinutes: 45 # to allow more time to collect CodeQL debug info.
 
       variables:
         DotNetMoniker: net8.0
+        # Temporary variables to collect CodeQL info to debug OSX ARM64 build issue.
+        # They must be removed as soon as they not needed to save storage.
+        ${{ if eq( matrixEntry.TargetRuntime, 'osx-arm64' ) }}:
+          Codeql.PublishDatabaseLog: true
+          Codeql.Cadence: 0
 
       pool:
         vmImage: ${{ matrixEntry.VMImage }}
 
       steps:
+        # To debug OSX ARM64 CodeQL build issue.
+        - script: csrutil status
+          displayName: System Integrity Protection status
+          condition: eq( '${{ matrixEntry.TargetRuntime }}', 'osx-arm64' )
+
+        - script: echo "Codeql.PublishDatabaseLog = ${{ variables['Codeql.PublishDatabaseLog'] }}; Codeql.Cadence = ${{ variables['Codeql.Cadence'] }}"
+          displayName: Print CodeQL debug info variable
+          condition: eq( '${{ matrixEntry.TargetRuntime }}', 'osx-arm64' )
+
         - checkout: self
           displayName: Deep git fetch for version generation
           fetchDepth: 0 # Use deep fetch for the version calculation by Nerdbank.GitVersioning