docs: update per comments

Signed-off-by: Yi Zha <[email protected]>

Author: yizha1

articles/container-registry/container-registry-tutorial-sign-build-push.md

@@ -202,17 +202,26 @@ The following steps show how to create a self-signed certificate for testing pur
     ```
 
     To authenticate with AKV, by default, the following credential types if enabled will be tried in order:
-
-    - [environment](/dotnet/api/azure.identity.environmentcredential)
-    - [workloadid](/dotnet/api/azure.identity.workloadidentitycredential)
-    - [managedid](/dotnet/api/azure.identity.managedidentitycredential)
-    - [azurecli](/dotnet/api/azure.identity.azureclicredential)
+ 
+    - [Environment credential](/dotnet/api/azure.identity.environmentcredential)
+    - [Workload identity credential](/dotnet/api/azure.identity.workloadidentitycredential)
+    - [Managed identity credential](/dotnet/api/azure.identity.managedidentitycredential)
+    - [Azure CLI credential](/dotnet/api/azure.identity.azureclicredential)
     
-    To customize the default behavior, consider using an additional plugin configuration called `credential_type`. For instance, you can explicitly set the credential type to `azurecli` as demonstrated below:
+    If you want to specify a credential type, use an additional plugin configuration called `credential_type`. For example, you can explicitly set `credential_type` to `azurecli` for using Azure CLI credential, as demonstrated below:
     
     ```bash
     notation sign --signature-format cose --id $KEY_ID --plugin azure-kv --plugin-config self_signed=true --plugin-config credential_type=azurecli $IMAGE
     ```
+
+    See below table for the values of `crendtial_type` for various credential types.
+
+    | Credential type              | Value for `crendtial_type` |
+    | ---------------------------- | -------------------------- |
+    | Environment credential       | `environment`              |
+    | Workload identity credential | `workloadid`               |
+    | Managed identity credential  | `managedid`                |
+    | Azure CLI credential         | `azurecli`                 |
     
 5. View the graph of signed images and associated signatures.
 

articles/container-registry/container-registry-tutorial-sign-trusted-ca.md

@@ -220,17 +220,26 @@ To import the certificate:
    ```
 
    To authenticate with AKV, by default, the following credential types if enabled will be tried in order:
+ 
+   - [Environment credential](/dotnet/api/azure.identity.environmentcredential)
+   - [Workload identity credential](/dotnet/api/azure.identity.workloadidentitycredential)
+   - [Managed identity credential](/dotnet/api/azure.identity.managedidentitycredential)
+   - [Azure CLI credential](/dotnet/api/azure.identity.azureclicredential)
+    
+   If you want to specify a credential type, use an additional plugin configuration called `credential_type`. For example, you can explicitly set `credential_type` to `azurecli` for using Azure CLI credential, as demonstrated below:
+    
+   ```bash
+   notation sign --signature-format cose --id $KEY_ID --plugin azure-kv --plugin-config credential_type=azurecli $IMAGE
+   ```
 
-   - [environment](/dotnet/api/azure.identity.environmentcredential)
-   - [workloadid](/dotnet/api/azure.identity.workloadidentitycredential)
-   - [managedid](/dotnet/api/azure.identity.managedidentitycredential)
-   - [azurecli](/dotnet/api/azure.identity.azureclicredential)
-
-   To customize the default behavior, consider using an additional plugin configuration called `credential_type`. For instance, you can explicitly set the credential type to `azurecli` as demonstrated below:
+   See below table for the values of `crendtial_type` for various credential types.
 
-    ```bash
-    notation sign --signature-format cose --id $KEY_ID --plugin azure-kv --plugin-config credential_type=azurecli $IMAGE
-    ```
+   | Credential type              | Value for `crendtial_type` |
+   | ---------------------------- | -------------------------- |
+   | Environment credential       | `environment`              |
+   | Workload identity credential | `workloadid`               |
+   | Managed identity credential  | `managedid`                |
+   | Azure CLI credential         | `azurecli`                 |
 
 6. View the graph of signed images and associated signatures.