diff --git a/.azurePipelines/build-pipeline.yml b/.azurePipelines/build-pipeline.yml
index 476309ac..7012c667 100644
--- a/.azurePipelines/build-pipeline.yml
+++ b/.azurePipelines/build-pipeline.yml
@@ -1,5 +1,10 @@
 trigger: none
 
+pr:
+  branches:
+    include:
+      - main
+
 parameters:
   - name: Version
     default: '1.0.0'
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 95c9af9f..1d6cd53b 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -73,10 +73,10 @@ jobs:
 
     - uses: actions/setup-dotnet@v5
       with:
-        dotnet-version: '10.0.x'
+        global-json-file: global.json
 
     - name: Restore dependencies
-      run: dotnet restore src/PackageUploader.sln
+      run: dotnet restore src/PackageUploader.sln --locked-mode
 
     - name: Build solution
       run: dotnet build src/PackageUploader.sln --configuration Release --no-restore
diff --git a/.github/workflows/dotnet.yml b/.github/workflows/dotnet.yml
index 8545d477..5ff93eca 100644
--- a/.github/workflows/dotnet.yml
+++ b/.github/workflows/dotnet.yml
@@ -19,9 +19,9 @@ jobs:
     - name: Setup .NET
       uses: actions/setup-dotnet@v5
       with:
-        dotnet-version: 10.0.x
+        global-json-file: global.json
     - name: Restore dependencies
-      run: dotnet restore
+      run: dotnet restore --locked-mode
       working-directory: ./src
     - name: Build
       run: dotnet build --no-restore
diff --git a/global.json b/global.json
index 4e3d13c6..fbae32fd 100644
--- a/global.json
+++ b/global.json
@@ -1,7 +1,7 @@
 {
     "sdk": {
         "version": "10.0.203",
-        "rollForward": "latestPatch"
+        "rollForward": "disable"
     },
     "test": {
         "runner": "Microsoft.Testing.Platform"