If the webapp publish profile secret is empty, webapps-deploy v3 doesn’t deploy but reports the deploy as passing. See Azure/webapps-deploy Issue #404.
Configs were set before running the deploy. This means that the config values in Azure are updated even if the deploy fails.
The action was runnable by anyone with write access. That is too broad for production.
To avoid these known issues, the PR updates to...
check that all required secrets are set before proceeding
only update configs if the deploy passes
call the reusable workflow that checks if the user has access to deploy
Multiple issues are fixed in this PR:
To avoid these known issues, the PR updates to...