Use OIDC for the bicep demo deploy

switch from secret to OIDC
DesignsbyBlanc · Feb 23, 2023 · ea92f64 · ea92f64
1 parent 411776e
commit ea92f64
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/.github/workflows/bicepdeploy.yml b/.github/workflows/bicepdeploy.yml
@@ -3,6 +3,10 @@ on:
 
 name: Deploy Bicep Demo
 
+permissions:
+      id-token: write
+      contents: read
+
 jobs:
   deploy-infrastructure:
     runs-on: ubuntu-latest
@@ -15,7 +19,9 @@ jobs:
     - name: Login to Azure
       uses: azure/login@v1
       with:
-        creds: ${{ secrets.AZURE_CREDENTIALS }}
+          client-id: ${{ secrets.AZURE_CLIENT_ID }}
+          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
+          subscription-id: ${{ secrets.AZURE_SUB_ID }}
 
       # Deploy Bicep file
     - name: Deploy the bicep file