Skip to content

Conversation

Copy link
Contributor

Copilot AI commented Aug 25, 2025

This PR updates the CI pipeline to use the shared az-artifact-authenticate step from workleap/wl-reusable-workflows for Azure DevOps artifact feed authentication, replacing the previous manual secret retrieval approach.

Changes Made

CI Workflow (.github/workflows/ci.yml)

  • Replaced the Get gsoft-nuget-feed-ado-pat secret step with the az-artifact-authenticate action
  • Removed the separate actions/setup-dotnet@v4 step (now included in az-artifact-authenticate)
  • Simplified environment variables by removing NUGET_API_KEY (authentication now handled via VSS_NUGET_ACCESSTOKEN)
  • Configured the action to use variables: ${{ toJSON(vars) }} for cleaner parameter passing

Build Script (Build.ps1)

  • Added support for VSS_NUGET_ACCESSTOKEN authentication alongside existing NUGET_API_KEY
  • Uses "az-api-key" as the API key when authenticating with Azure DevOps tokens
  • Maintains backward compatibility with existing authentication methods

Authentication Flow

The new authentication logic follows this precedence:

  1. NUGET_API_KEY on Linux (existing behavior)
  2. VSS_NUGET_ACCESSTOKEN on any platform (new Azure Artifacts authentication)
  3. No push if neither is available

Benefits

  • Simplified CI configuration by consolidating authentication steps and using variables object
  • Improved security through Azure CLI-based authentication
  • Enhanced cross-platform support (VSS_NUGET_ACCESSTOKEN works on any OS)
  • Maintained full backward compatibility

The az-artifact-authenticate step handles Azure CLI login, .NET setup, and credential provider installation automatically, reducing the CI workflow complexity while providing more robust authentication.

Fixes #120.


✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

Copy link
Contributor Author

Copilot AI commented Aug 25, 2025

@Gcaya 👋 This repository doesn't have Copilot instructions. With Copilot instructions, I can understand the repository better, work faster and produce higher quality PRs.

I can generate a .github/copilot-instructions.md file for you automatically. Click here to open a pre-filled issue and assign it to me. I'll write the instructions, and then tag you for review.

Copilot AI and others added 2 commits August 25, 2025 14:57
…thenticate

Co-authored-by: Gcaya <8711024+Gcaya@users.noreply.github.com>
…ld.ps1

Co-authored-by: Gcaya <8711024+Gcaya@users.noreply.github.com>
Copilot AI changed the title [WIP] Change the CI workflow to use the shared az-artifact-authenticate step Replace secret retrieval with az-artifact-authenticate step in CI workflow Aug 25, 2025
Copilot AI requested a review from Gcaya August 25, 2025 15:06
Co-authored-by: Gcaya <8711024+Gcaya@users.noreply.github.com>
@Gcaya Gcaya marked this pull request as ready for review August 25, 2025 21:26
@Gcaya Gcaya requested review from a team and Copilot August 25, 2025 21:26
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR modernizes the CI pipeline's Azure DevOps artifact feed authentication by replacing manual secret retrieval with a dedicated reusable workflow action. The change simplifies the CI configuration while maintaining backward compatibility and improving cross-platform support.

  • Replaces manual secret retrieval step with az-artifact-authenticate action
  • Updates build script to support VSS_NUGET_ACCESSTOKEN authentication alongside existing methods
  • Removes redundant .NET setup step and simplifies environment variable configuration

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File Description
.github/workflows/ci.yml Replaces secret retrieval and .NET setup with consolidated az-artifact-authenticate action
Build.ps1 Adds support for VSS_NUGET_ACCESSTOKEN authentication with az-api-key

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
@Gcaya Gcaya merged commit ec133b2 into main Aug 25, 2025
4 of 6 checks passed
@Gcaya Gcaya deleted the copilot/fix-120 branch August 25, 2025 21:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Change the CI workflow to use the shared az-artifact-authenticate step

3 participants