Update AuthToken for eng/common pipelines#16038
Conversation
There was a problem hiding this comment.
Pull request overview
This pull request updates shared Azure DevOps pipeline step templates under eng/common to make GitHub authentication explicit by changing the AuthToken parameter default from $(azuresdk-github-pat) to an empty string, relying on the existing login-to-github.yml flow when no token is provided.
Changes:
- Set
AuthTokendefault to''in multiple git-related step templates to avoid implicit use of$(azuresdk-github-pat). - Keep the existing conditional auto-login behavior (
login-to-github.yml) whenAuthTokenis empty.
Reviewed changes
Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| eng/common/pipelines/templates/steps/git-push-changes.yml | Changes default AuthToken to empty string so token usage becomes explicit while preserving the auto-login path. |
| eng/common/pipelines/templates/steps/create-tags-and-git-release.yml | Changes default AuthToken to empty string so release/tag operations don’t implicitly use $(azuresdk-github-pat). |
| eng/common/pipelines/templates/steps/create-pull-request.yml | Changes default AuthToken to empty string for PR creation flows; existing auto-login conditional remains in place. |
|
The following pipelines have been queued for testing: |
chidozieononiwu
changed the title
|
The following pipelines have been queued for testing: |
Sync eng/common directory with azure-sdk-tools for PR Azure/azure-sdk-tools#16038 See [eng/common workflow](https://github.com/Azure/azure-sdk-tools/blob/main/eng/common/README.md#workflow) Co-authored-by: Chidozie Ononiwu <chononiw@microsoft.com>
Sync eng/common directory with azure-sdk-tools for PR Azure/azure-sdk-tools#16038 See [eng/common workflow](https://github.com/Azure/azure-sdk-tools/blob/main/eng/common/README.md#workflow) Co-authored-by: Chidozie Ononiwu <chononiw@microsoft.com>
This pull request updates pipeline templates to change the default value of the
AuthTokenparameter from a predefined variable to an empty string. This change impacts authentication handling in several pipeline steps related to Git operations.Pipeline authentication parameter updates:
AuthTokenparameter from$(azuresdk-github-pat)to an empty string ineng/common/pipelines/templates/steps/create-pull-request.yml,eng/common/pipelines/templates/steps/create-tags-and-git-release.yml, andeng/common/pipelines/templates/steps/git-push-changes.yml. This makes authentication explicit and avoids unintentional use of a default token. [1] [2] [3]