Skip to content

Conversation

@azure-sdk
Copy link
Collaborator

Sync eng/common directory with azure-sdk-tools for PR Azure/azure-sdk-tools#13235 See eng/common workflow

@azure-sdk azure-sdk requested a review from a team as a code owner December 11, 2025 17:55
@azure-sdk azure-sdk added EngSys This issue is impacting the engineering system. Central-EngSys This issue is owned by the Engineering System team. labels Dec 11, 2025
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR syncs the eng/common directory with changes from azure-sdk-tools PR #13235, implementing a security enhancement that migrates APIView authentication from API Keys to Azure Managed Identity-based Bearer tokens. The changes modernize the authentication mechanism while updating API endpoints to align with the new APIView service contract.

Key Changes:

  • Replaced API Key authentication with Azure CLI Bearer Token authentication using Managed Identity
  • Updated APIView service endpoints from legacy URLs to new standardized paths
  • Changed HTTP methods to match updated API contracts (GET → POST for create operation)

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
eng/common/scripts/Create-APIReview.ps1 Removed APIKey parameter; added Get-ApiViewBearerToken function for managed identity authentication; updated API endpoints from /UploadAutoReview to /upload and /CreateApiReview to /create; changed authentication headers from ApiKey to Bearer token; updated HTTP method from GET to POST for create operation
eng/common/pipelines/templates/steps/create-apireview.yml Changed task from Powershell@2 to AzureCLI@2 to support Azure authentication; added Azure subscription configuration; removed APIKey parameter and secret reference

@AlitzelMendez
Copy link
Member

/check-enforcer evaluate

@azure-sdk azure-sdk merged commit f8c127f into main Dec 11, 2025
14 checks passed
@azure-sdk azure-sdk deleted the sync-eng/common-stop-using-apikey-13235 branch December 11, 2025 19:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Central-EngSys This issue is owned by the Engineering System team. EngSys This issue is impacting the engineering system.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants