azure-dev.yml

name: Azure Template Validation
on:
  workflow_dispatch:
  push:
    branches:
      - main
 
permissions:
  contents: read
  id-token: write
  pull-requests: write
 
jobs:
  template_validation_job:
    runs-on: ubuntu-latest
    environment: production
    name: Template validation
 
    steps:
      # Step 1: Checkout the code from your repository
      - name: Checkout code
        uses: actions/checkout@v4

      # Step 2: Pre-authenticate Azure for azd validation
      - name: Login to Azure
        shell: bash
        run: |
          az login --service-principal -u "${{ secrets.AZURE_CLIENT_ID }}" -p "${{ secrets.AZURE_CLIENT_SECRET }}" --tenant "${{ secrets.AZURE_TENANT_ID }}"
          az account set --subscription "${{ secrets.AZURE_SUBSCRIPTION_ID }}"
 
      # Step 3: Validate the Azure template using microsoft/template-validation-action
      - name: Validate Azure Template
        uses: microsoft/template-validation-action@v0.4.3
        with:
          workingDirectory: .
          validateAzd: ${{ vars.TEMPLATE_VALIDATE_AZD }}
          useDevContainer: ${{ vars.TEMPLATE_USE_DEV_CONTAINER }}
          validateTests: ${{ vars.TEMPLATE_VALIDATE_TESTS }}
        id: validation
        env:
          AZURE_CLIENT_ID: ${{ secrets.AZURE_CLIENT_ID }}
          AZURE_TENANT_ID: ${{ secrets.AZURE_TENANT_ID }}
          AZURE_CLIENT_SECRET: ${{ secrets.AZURE_CLIENT_SECRET }}
          AZURE_SUBSCRIPTION_ID: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
          AZURE_ENV_NAME: ${{ secrets.AZURE_ENV_NAME }}
          AZURE_LOCATION: ${{ secrets.AZURE_LOCATION }}
          AZURE_ENV_OPENAI_LOCATION: ${{ secrets.AZURE_ENV_OPENAI_LOCATION }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
      # Step 4: Print the result of the validation
      - name: Print result
        run: cat ${{ steps.validation.outputs.resultFile }}