diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d5a0feaf530..88890969d56 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -43,6 +43,11 @@ jobs:
         with:
           dotnet-version: 3.1.301
       
+      - name: Update NuGet config
+        # workaround for bug in setup-dotnet action (the config samples for authenticated feeds don't work)
+        # encryption does not work on Linux or MacOS
+        run: dotnet nuget update source Official --username bicep --password ${{ secrets.MSAZURE_NUGET_AUTH }} --valid-authentication-types=basic --configfile ./NuGet.config --store-password-in-clear-text
+      
       - name: Build
         run: dotnet build --configuration ${{ matrix.configuration }}
       
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 98a50eed516..6a71f959df8 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -2,11 +2,11 @@ name: "CodeQL"
 
 on:
   workflow_dispatch:
-  push:
-    branches: [master, ]
-  pull_request:
+  #push:
+  #  branches: [master, ]
+  #pull_request:
     # The branches below must be a subset of the branches above
-    branches: [master]
+  #  branches: [master]
   schedule:
     - cron: '0 4 * * 6'
 
diff --git a/NuGet.config b/NuGet.config
new file mode 100644
index 00000000000..413c87b4b92
--- /dev/null
+++ b/NuGet.config
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="utf-8"?>
+<configuration>
+  <packageSources>
+    <clear />
+    <add key="nuget.org" value="https://api.nuget.org/v3/index.json" />
+    <add key="Official" value="https://pkgs.dev.azure.com/msazure/_packaging/Official/nuget/v3/index.json" />
+  </packageSources>
+</configuration>
\ No newline at end of file
diff --git a/src/Bicep.Core/Bicep.Core.csproj b/src/Bicep.Core/Bicep.Core.csproj
index b12387eb537..5303fd7a4c3 100644
--- a/src/Bicep.Core/Bicep.Core.csproj
+++ b/src/Bicep.Core/Bicep.Core.csproj
@@ -3,6 +3,7 @@
     <TargetFramework>netstandard2.0</TargetFramework> 
   </PropertyGroup>
   <ItemGroup>
+    <PackageReference Include="Azure.ResourceManager.Deployments.Expression" Version="1.0.23" />
     <PackageReference Include="JetBrains.Annotations" Version="2020.1.0">
       <PrivateAssets>all</PrivateAssets>
     </PackageReference>