diff --git a/.github/workflows/on-push-verification.yml b/.github/workflows/on-push-verification.yml
index c45e79fb..6ed04930 100644
--- a/.github/workflows/on-push-verification.yml
+++ b/.github/workflows/on-push-verification.yml
@@ -17,7 +17,7 @@ jobs:
 
     strategy:
       matrix:
-        os: [windows-latest, ubuntu-latest]
+        os: [windows-latest] #, ubuntu-latest]
 
     steps:
 
@@ -25,8 +25,12 @@ jobs:
     - uses: actions/checkout@v3
 
       # Run analyzers
-    - uses: ./
+    - uses: microsoft/security-devops-action@main
       id: msdo
+      #env:
+      #  gdn_checkov_skippath: 'SecureApp'
+      #with:
+      #  tools: 'checkov'
 
       # Upload alerts to the Security tab
     - name: Upload alerts to Security tab
@@ -36,7 +40,7 @@ jobs:
 
       # Upload alerts file as a workflow artifact
     - name: Upload alerts file as a workflow artifact
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4
       with:  
         name: alerts
         path: ${{ steps.msdo.outputs.sarifFile }}
diff --git a/.github/workflows/sample-workflow.yml b/.github/workflows/sample-workflow.yml
index 052df605..e56ecdf8 100644
--- a/.github/workflows/sample-workflow.yml
+++ b/.github/workflows/sample-workflow.yml
@@ -24,7 +24,7 @@ jobs:
 
       # Run analyzers
     - name: Run Microsoft Security DevOps Analysis
-      uses: microsoft/security-devops-action@v1
+      uses: microsoft/security-devops-action@feature/node20
       id: msdo
 
       # Upload alerts to the Security tab
@@ -35,7 +35,7 @@ jobs:
 
       # Upload alerts file as a workflow artifact
     - name: Upload alerts file as a workflow artifact
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4
       with:  
         name: alerts
         path: ${{ steps.msdo.outputs.sarifFile }}
diff --git a/.github/workflows/test-workflow.yml b/.github/workflows/test-workflow.yml
new file mode 100644
index 00000000..a32f3d45
--- /dev/null
+++ b/.github/workflows/test-workflow.yml
@@ -0,0 +1,77 @@
+# test-workflow
+# docs are in the repo 
+
+name: chrisnielsen test with new CLI
+on: push
+
+env:
+  GDN_DEBUG_DROP: 'true'
+
+jobs:
+  sample:
+    name: Microsoft Security DevOps
+
+    # MSDOruns on windows-latest.
+    # ubuntu-latest and macos-latest supporting coming soon
+    runs-on: self-hosted
+
+    steps:
+
+      # Checkout your code repository to scan
+    - uses: actions/checkout@v3
+
+    # Ensure a compatible version of dotnet is installed.
+    # The [Microsoft Security DevOps CLI](https://aka.ms/msdodocs) is built with dotnet v3.1.201.
+    # A version greater than or equal to v3.1.201 of dotnet must be installed on the agent in order to run this action.
+    # GitHub hosted runners already have a compatible version of dotnet installed and this step may be skipped.
+    # For self-hosted runners, ensure dotnet version 3.1.201 or later is installed by including this action:
+    # - uses: actions/setup-dotnet@v1
+    #   with:
+    #     dotnet-version: '3.1.x'
+
+    #- name: 'Docker stuff'
+    #  uses: docker/build-push-action@v4
+    #  with:
+    #    context: ./samples
+    #    push: false
+    #    tags: contosofakeimage
+
+    # Run open source static analysis tools
+    - name: Run Microsoft Security DevOps Analysis
+      uses: chrisnielsen-MS/security-devops-action@main
+      id: msdo
+      with:
+        tools: 'credscan'
+
+      # Upload debug drop file as a workflow artifact
+    - name: Upload alerts file as a workflow artifact
+      uses: actions/upload-artifact@v3
+      with:  
+        name: debugDrop
+        path: ${{ steps.msdo.outputs.debugDrop }}
+
+    - name: Run Microsoft Security DevOps Analysis
+      uses: chrisnielsen-MS/security-devops-action@main
+      id: msdo2
+      with:
+        tools: 'eslint'
+      #env:
+      #  trivy_target: "contosofakeimage"
+
+    # - name: Run MSDO
+    #   uses: davidknise/security-devops-action@main
+    #   id: msdolocal
+
+      # Upload results to the Security tab
+    - name: Upload results to Security tab
+      uses: github/codeql-action/upload-sarif@v1
+      with:
+        sarif_file: ${{ steps.msdo.outputs.sarifFile }}
+
+
+
+    - name: Upload alerts file as a workflow artifact
+      uses: actions/upload-artifact@v4
+      with:  
+        name: debugDrop2
+        path: ${{ steps.msdo2.outputs.debugDrop }}