test with gh actions env

Author: antoineatstariongroup

.github/workflows/CodeQuality.yml

@@ -13,6 +13,15 @@ jobs:
   build:
     name: Build
     runs-on: ubuntu-latest
+    env:
+      # Use cached CRL data only for cert revocation checks. Works around
+      # NU3012 ("certificate revoked") for transitive ReactiveUI / Splat 19.3.1
+      # packages whose author certificate (Glenn Watson) was revoked at the CA
+      # in 2026-Q2. `signatureValidationMode=accept` in NuGet.Config does NOT
+      # cover this case because it only relaxes the "require signature" check,
+      # not the chain-validation step that NU3012 fires from. Revert this env
+      # var once the affected packages are re-signed and re-published.
+      NUGET_CERT_REVOCATION_MODE: offline
     steps:
       - uses: actions/checkout@v6.0.2
         with:

.github/workflows/codeql-analysis.yml

@@ -11,6 +11,13 @@ jobs:
 
     runs-on: ubuntu-latest
 
+    env:
+      # Use cached CRL data only for cert revocation checks. Works around
+      # NU3012 ("certificate revoked") for transitive ReactiveUI / Splat 19.3.1
+      # packages whose author certificate was revoked at the CA in 2026-Q2.
+      # Revert this env var once the affected packages are re-signed.
+      NUGET_CERT_REVOCATION_MODE: offline
+
     steps:
     - name: Checkout repository
       uses: actions/checkout@v6.0.2