Azure-Samples / ai-rag-chat-evaluator

Tools for evaluation of RAG Chat Apps using Azure AI Evaluate SDK and OpenAI
MIT License
162 stars 58 forks source link

Remove unused infrastructure, disable keyed access for OpenAI service #83

Closed pamelafox closed 2 months ago

pamelafox commented 2 months ago

Purpose

This PR resolves several security scanning alerts by removing the Bicep files, which are unused anyway. It also sets disableLocalAuth: true for the deployed OpenAI service, since we use RBAC for that by default anyway. If developers need key access for that elsewhere, they'll need to turn it back on manually.

Does this introduce a breaking change?

[ ] Yes
[X] No

Pull Request Type

What kind of change does this Pull Request introduce?

[X] Bugfix
[ ] Feature
[ ] Code style update (formatting, local variables)
[ ] Refactoring (no functional changes, no api changes)
[ ] Documentation content changes
[ ] Other... Please describe:

How to Test