product-builds-dnceng-pipeline-secrets.yaml

storageLocation:
  type: azure-key-vault
  parameters:
    subscription: a4fc5514-21a9-4296-bfaf-5c7ee7fa35d1
    name: dnceng-pipeline-secrets

references:
  engKeyVault:
    type: azure-key-vault
    parameters:
      subscription: a4fc5514-21a9-4296-bfaf-5c7ee7fa35d1
      name: EngKeyVault

secrets:
  BotAccount-dotnet-maestro-bot-no-scopes-PAT:
    type: github-access-token
    parameters:
      gitHubBotAccountSecret:
        location: engKeyVault
        name: BotAccount-dotnet-maestro-bot
      gitHubBotAccountName: dotnet-maestro-bot
  
  # public_repo scopes (classic token)
  # Used in dotnet-comment-bot-service-connection in dnceng-public and DevDiv
  BotAccount-dotnet-comment-bot-public-PAT:
    type: github-access-token
    parameters:
      gitHubBotAccountSecret:
        location: engKeyVault
        name: BotAccount-dotnet-comment-bot
      gitHubBotAccountName: dotnet-comment-bot

  # Service Principal used by the Guardian APIScan build task
  apiscan-service-principal-app-id:
    type: text
    parameters:
      description: set to never expire