Change the CI workflow to use the shared az-artifact-authenticate step (#121)

* Initial plan

* Initial setup and analysis of repository state

Co-authored-by: Gcaya <8711024+Gcaya@users.noreply.github.com>

* Replace PAT-based auth with az-artifact-authenticate step

- Replace secret retrieval step with az-artifact-authenticate action
- Remove setup-dotnet step (included in az-artifact-authenticate)
- Add VSS_NUGET_ACCESSTOKEN support to Build.ps1
- Remove NUGET_API_KEY environment variable from CI

Co-authored-by: Gcaya <8711024+Gcaya@users.noreply.github.com>

* Update az-artifact-authenticate to use variables parameter

Co-authored-by: Gcaya <8711024+Gcaya@users.noreply.github.com>

* Simplify variables parameter using toJSON(vars)

Co-authored-by: Gcaya <8711024+Gcaya@users.noreply.github.com>

* Update Build.ps1

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Gcaya <8711024+Gcaya@users.noreply.github.com>
Co-authored-by: Guillaume Caya-Letourneau <guillaume.caya.letourneau@gmail.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Author: 3 people

.github/workflows/ci.yml

@@ -30,21 +30,11 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: Get gsoft-nuget-feed secret
-        id: get_gsoft_nuget_feed_secret
-        uses: workleap/wl-reusable-workflows/retrieve-managed-secret@main
+      - name: Azure Artifacts Authenticate
+        uses: workleap/wl-reusable-workflows/az-artifact-authenticate@main
         with:
-          azure-client-id: ${{ vars.AZURE_CLIENT_ID }}
-          azure-tenant-id: ${{ vars.AZURE_TENANT_ID }}
-          azure-subscription-id: ${{ vars.AZURE_SUBSCRIPTION_ID }}
-          keyvault-name: ${{ vars.IDP_CICD_KEYVAULT_NAME }}
-          secret-name: "gsoft-nuget-feed-ado-pat"
-
-      - uses: actions/setup-dotnet@v4
-        with:
-          source-url: ${{ vars.GSOFTDEV_NUGET_SOURCE }}
-        env:
-          NUGET_AUTH_TOKEN: ${{ steps.get_gsoft_nuget_feed_secret.outputs.secret }}
+          feed-url: ${{ vars.GSOFTDEV_NUGET_SOURCE }}
+          variables: ${{ toJSON(vars) }}
 
       - name: Install Mono
         shell: bash
@@ -58,7 +48,6 @@ jobs:
         shell: pwsh
         env:
           NUGET_SOURCE: ${{ vars.GSOFTDEV_NUGET_SOURCE }}
-          NUGET_API_KEY: ${{ steps.get_gsoft_nuget_feed_secret.outputs.secret }}
 
   linearb:
     needs: [main]

Build.ps1

@@ -40,6 +40,9 @@ Process {
     if (($null -ne $env:NUGET_SOURCE) -and ($null -ne $env:NUGET_API_KEY)) {
       Exec { & dotnet nuget push "$nupkgsPath" -s $env:NUGET_SOURCE -k $env:NUGET_API_KEY --skip-duplicate }
     }
+    elseif (($null -ne $env:NUGET_SOURCE) -and ($null -ne $env:VSS_NUGET_ACCESSTOKEN)) {
+      Exec { & dotnet nuget push "$nupkgsPath" -s $env:NUGET_SOURCE -k "az-api-key" --skip-duplicate }
+    }
   }
   finally {
     Pop-Location