Disable CodeQL for courtesy and hotfixes (#19792)

Author: DmitriiBobreshev

azure-pipelines.yml

@@ -65,11 +65,6 @@ extends:
     sdl:
       sbom:
         enabled: false
-      ${{ eq(parameters.enableCodeQL, true) }}:
-        codeql:
-          compiled:
-            enabled: ${{ variables.runCodeQl }}
-            justificationForDisabling: 'Disabling to not scan AzureDevOpsRepo'
       baseline:
         baselineSet: default
         baselineFile: $(Build.SourcesDirectory)/.gdn/.gdnbaselines

ci/build-single-jobs.yml

@@ -37,6 +37,8 @@ jobs:
   - job: create_hotfix
     displayName: Create HotFix PR
     dependsOn: build_single_task
+    variables:
+      ONEES_ENFORCED_CODEQL_ENABLED: ${{ eq(parameters.enableCodeQL, true) }}
     pool: 
       name: 1ES-ABTT-Shared-Pool
       image: abtt-windows-2022
@@ -51,6 +53,8 @@ jobs:
     - job: create_ado_pr
       displayName: Update UnifiedDependencies.xml
       dependsOn: build_single_task
+      variables:
+        ONEES_ENFORCED_CODEQL_ENABLED: ${{ eq(parameters.enableCodeQL, true) }}
       pool: 
         name: 1ES-ABTT-Shared-Pool
         image: abtt-windows-2022