From 1fa3f95bda51fc7dc0797451ea7da275b7d4ad74 Mon Sep 17 00:00:00 2001
From: Wojtek Mach <wojtek@wojtekmach.pl>
Date: Wed, 19 Feb 2025 11:20:11 +0100
Subject: [PATCH] Add instructions for updating AZURE_CLIENT_SECRET

---
 .github/workflows/release.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0ef12ff3dc1..9fee9a60d66 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -134,6 +134,13 @@ jobs:
         with:
           azure-tenant-id: ${{ secrets.AZURE_TENANT_ID }}
           azure-client-id: ${{ secrets.AZURE_CLIENT_ID }}
+          # AZURE_TENANT_ID and AZURE_CLIENT_ID should stay the same,
+          # but AZURE_CLIENT_SECRET has expiration date. When it expires go to
+          # App Registrations / <app> / Certificates & secrets,
+          # click (+) New client secret, note the "Value" (not "Secret ID")
+          # and update it:
+          #
+          #     $ gh --repo elixir-lang/elixir secret set AZURE_CLIENT_SECRET
           azure-client-secret: ${{ secrets.AZURE_CLIENT_SECRET }}
           endpoint: https://eus.codesigning.azure.net/
           trusted-signing-account-name: trusted-signing-elixir