Azure / Azure/static-web-apps

Add Federated Credentials support for GitHub Action (Azure/static-web-apps-deploy)

Open
#1,304 1 comment 7 reactions 0 assignees View on GitHub
enhancement
Dominant language
No language data
Stars
346
Forks
67
PR merge metrics
No merged PRs in 30d

Description

**Is your feature request related to a problem? Please describe.**
When using static-web-apps-deploy i cannot use the more secure federated credential for deployment authentication (as supported by deployment targets such as Azure App Service), but have to use azure_static_web_apps_api_token instead, which is less secure for obviouse reasons.

**Describe the solution you'd like**
support the federated credentials via az login - similar to Azure/webapps-deploy

**Describe alternatives you've considered**
I was considering using a workarround as described here: https://www.cloudwithchris.com/blog/using-oidc-github-actions-azure-swa/ however piping secret tokens into GITHUB_ENV is propably even less secure than storing them in the Github secrets store.

**Additional context**
-

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.