Change CI workflow to use shared az-artifact-authenticate step (#141)

* Initial plan

* Initial commit: create feature branch for az-artifact-authenticate integration

Co-authored-by: Gcaya <8711024+Gcaya@users.noreply.github.com>

* Replace PAT retrieval with az-artifact-authenticate step and update Build.ps1

Co-authored-by: Gcaya <8711024+Gcaya@users.noreply.github.com>

* Update Build.ps1

* Change feed-url to use vars.GSOFTDEV_NUGET_SOURCE instead of secrets.NUGET_GSOFTDEV_FEED_URL

Co-authored-by: Gcaya <8711024+Gcaya@users.noreply.github.com>

* Change NUGET_SOURCE to use vars.GSOFTDEV_NUGET_SOURCE instead of secrets.NUGET_GSOFTDEV_FEED_URL

Co-authored-by: Gcaya <8711024+Gcaya@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Gcaya <8711024+Gcaya@users.noreply.github.com>
Co-authored-by: Guillaume Caya-Letourneau <guillaume.caya.letourneau@gmail.com>

Author: Copilot

.github/workflows/ci.yaml

@@ -29,21 +29,11 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: Get gsoft-nuget-feed secret
-        id: get_gsoft_nuget_feed_secret
-        uses: workleap/wl-reusable-workflows/retrieve-managed-secret@main
+      - name: Authenticate to Azure Artifacts
+        uses: workleap/wl-reusable-workflows/az-artifact-authenticate@main
         with:
-          azure-client-id: ${{ vars.AZURE_CLIENT_ID }}
-          azure-tenant-id: ${{ vars.AZURE_TENANT_ID }}
-          azure-subscription-id: ${{ vars.AZURE_SUBSCRIPTION_ID }}
-          keyvault-name: ${{ vars.IDP_CICD_KEYVAULT_NAME }}
-          secret-name: "gsoft-nuget-feed-ado-pat"
-
-      - uses: actions/setup-dotnet@v4
-        with:
-          source-url: ${{ secrets.NUGET_GSOFTDEV_FEED_URL }}
-        env:
-          NUGET_AUTH_TOKEN: ${{ steps.get_gsoft_nuget_feed_secret.outputs.secret }}
+          feed-url: ${{ vars.GSOFTDEV_NUGET_SOURCE }}
+          variables: ${{ toJSON(vars) }}
 
       - uses: actions/setup-dotnet@v4
         with:
@@ -52,8 +42,7 @@ jobs:
       - run: ./Build.ps1
         shell: pwsh
         env:
-          NUGET_SOURCE: ${{ secrets.NUGET_GSOFTDEV_FEED_URL }}
-          NUGET_API_KEY: ${{ steps.get_gsoft_nuget_feed_secret.outputs.secret }}
+          NUGET_SOURCE: ${{ vars.GSOFTDEV_NUGET_SOURCE }}
 
   linearb:
     needs: [ci]

Build.ps1

@@ -28,6 +28,9 @@ Process {
         if (($null -ne $env:NUGET_SOURCE ) -and ($null -ne $env:NUGET_API_KEY)) {
             Exec { & dotnet nuget push "$nupkgsPath" -s $env:NUGET_SOURCE -k $env:NUGET_API_KEY --skip-duplicate }
         }
+        elseif (($null -ne $env:NUGET_SOURCE) -and ($null -ne $env:VSS_NUGET_ACCESSTOKEN)) {
+            Exec { & dotnet nuget push "$nupkgsPath" -s $env:NUGET_SOURCE -k "az-api-key" --skip-duplicate }
+        }
     }
     finally {
         Pop-Location