rerun2

Author: bmoussaud

.github/workflows/deploy.yml

@@ -1,43 +1,35 @@
-name: Manual Deploy ARM
+name: Azure Bicep
 
 on:
-    workflow_dispatch:
+  workflow_dispatch
 
 env:
-    targetEnv: dev
-
-permissions:
-  id-token: write
-  contents: read
-
+  targetEnv: dev
 
 jobs:
-    deploy:
-        runs-on: ubuntu-latest
-
-        steps:
-        - name: Checkout repository
-          uses: actions/checkout@v2
-
-        - name: Log in to Azure
-          uses: azure/login@v1
-          with:
-            client-id: ${{ secrets.AZURE_CLIENT_ID }}
-            tenant-id: ${{secrets.AZURE_TENANT_ID}}
-            subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
-            enable-AzPSSession: true
-          env:
-            AZURE_LOGIN_PRE_CLEANUP: true
-
-        - name: Deploy ARM Template
-          uses: azure/arm-deploy@v1
-          with:
-            scope: resourceGroup
-            subscriptionId: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
-            resourceGroupName: ${{ secrets.AZURE_RG }}
-            template: src/InfrastructureAsCode/main.bicep
-            #parameters: src/InfrastructureAsCode/main.parameters.json
-            parameters: environment=${{ secrets.ENVIRONMENT }}
-
-        - name: Deploy application
-          run: echo "Deploying application..."
+  build-and-deploy:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pages: write
+      id-token: write
+    steps:
+    # Checkout code
+    - uses: actions/checkout@main
+
+      # Log into Azure
+    - uses: azure/[email protected]
+      with:
+        client-id: ${{ secrets.AZURE_CLIENT_ID }}
+        tenant-id: ${{ secrets.AZURE_TENANT_ID }}
+        subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
+        enable-AzPSSession: true
+
+      # Deploy ARM template
+    - name: Run ARM deploy
+      uses: azure/arm-deploy@v1
+      with:
+        subscriptionId: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
+        resourceGroupName: ${{ secrets.AZURE_RG }}
+        template: ./src/InfrastructureAsCode/main.bicep
+        parameters: environment=${{ env.targetEnv }}

src/InfrastructureAsCode/federated-credential-params.json

@@ -1,5 +1,5 @@
 {
-    "name": "GitHubDevOpsCredential2",
+    "name": "GitHubDevOpsCredential3",
     "issuer": "https://token.actions.githubusercontent.com",
     "subject": "repo:bmoussaud/TechExcel-Accelerate-developer-productivity-with-GitHub-Copilot-and-Dev-Box:ref:refs/heads/main",
     "description": "Deploy Azure resources from the TechExcel DevOps practices GitHub repo",