search

microsoft / promptflow

Build high-quality LLM apps - from prototyping, testing to production deployment and monitoring.
https://microsoft.github.io/promptflow/
MIT License
8.32k stars 712 forks source link

Change tools-tests workflow to use federated credential instead of client secret #3077

Closed dorisjoy closed 1 week ago

dorisjoy commented 2 weeks ago

Change tools-tests workflow to use federated credential instead of client secret:

  1. In tools_tests.yml file to add permission section for id_token and content, this setting allows the JWT to be requested from GitHub's OIDC provider.
  2. Add azure/login@v1 to az login using federated credential;
  3. Using AzureCliCredential instead of ClientSecretCredential to init SecretClient.

workflow test link: https://github.com/microsoft/promptflow/actions/runs/8888730637

Delete the tools_secret_upload workflow since it is useless now.