diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e22a308a..348c425b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -152,7 +152,7 @@ jobs:
           do
             jq --raw-output '"PASS \(map(select(.pass == true)) | length)/\(length)"' "$json_report"
           done
-          FAILING_TESTS=$(jq --raw-output '.[] | select(.pass == false)' "${test_reports[@]}")
+          FAILING_TESTS=$(jq --slurp --raw-output '.[][] | select(.pass == false)' "${test_reports[@]}")
           if [[ ! -z "$FAILING_TESTS" ]]; then
             echo "ERROR: The following tests failed:"
             echo $FAILING_TESTS | jq .
@@ -229,6 +229,7 @@ jobs:
     needs: compile-and-test
     permissions:
       contents: read
+      packages: read # required by codeql pack install (GHCR rate limiting)
       pull-requests: read # required by pr-configs.sh (gh pr view)
 
     steps:
@@ -245,6 +246,17 @@ jobs:
         if: steps.changes.outputs.src == 'true' || github.event_name == 'workflow_dispatch'
         uses: ./.github/actions/install-codeql
 
+      - name: Install Packs
+        if: steps.changes.outputs.src == 'true' || github.event_name == 'workflow_dispatch'
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+        run: |
+          for lang in cpp csharp go java javascript python ruby; do
+            if [[ -d "${lang}/src" ]]; then
+              codeql pack install "${lang}/src"
+            fi
+          done
+
       - name: "Check Configurations"
         if: steps.changes.outputs.src == 'true' || github.event_name == 'workflow_dispatch'
         env: