Create a CodeQL job for C++ pipelines (#4566)

* Enable CodeQL

* No jobs, so CodeQL not being injected

* trying something else

* forgot a file

* Update eng/pipelines/templates/jobs/ci.tests.yml

Co-authored-by: Ahson Khan <ahkha@microsoft.com>

---------

Co-authored-by: Wes Haggard <weshaggard@users.noreply.github.com>
Co-authored-by: Ahson Khan <ahkha@microsoft.com>

eng/pipelines/templates/jobs/ci.tests.yml

@@ -86,6 +86,12 @@ jobs:
       value: "PLAYBACK"
     - name: AZURE_LOG_LEVEL
       value: "verbose"
+    - name: Codeql.Enabled 
+      value: true
+    - name: Codeql.BuildIdentifier 
+      value: ${{ parameters.ServiceDirectory }}
+    - name: Codeql.SkipTaskAutoInjection
+      value: false
     - ${{ each testEnvVar in parameters.TestEnv }}:
       - name: ${{ testEnvVar.Name }}
         value: ${{ testEnvVar.Value }}

eng/pipelines/templates/variables/globals.yml

@@ -20,3 +20,6 @@ variables:
   skipComponentGovernanceDetection: true
   DisableDockerDetector: true
   Package.EnableSBOMSigning: true
+
+  # Disable CodeQL injections except for where we specifically enable it
+  Codeql.SkipTaskAutoInjection: true