From 3b0b845f42e6f4bf53a8a3f17fe0fa58e9e5d571 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C3=93scar=20San=20Jos=C3=A9?= <oscarsj@github.com>
Date: Tue, 14 Apr 2026 18:35:27 +0200
Subject: [PATCH] Some more suggestions from CR

---
 src/setup-codeql.ts | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/src/setup-codeql.ts b/src/setup-codeql.ts
index b564161aa..8222f96e2 100644
--- a/src/setup-codeql.ts
+++ b/src/setup-codeql.ts
@@ -427,8 +427,10 @@ export async function getCodeQLSource(
       Feature.AllowToolcacheInput,
     );
     const allowToolcacheValue =
-      toolsInputFromRepositoryProperty ||
-      (allowToolcacheValueFF && (isDynamicWorkflow() || util.isInTestMode()));
+      allowToolcacheValueFF &&
+      (toolsInputFromRepositoryProperty ||
+        isDynamicWorkflow() ||
+        util.isInTestMode());
     if (allowToolcacheValue) {
       // If `toolsInput === "toolcache"`, try to find the latest version of the CLI that's available in the toolcache
       // and use that. We perform this check here since we can set `cliVersion` directly and don't want to default to