Fix AI Gallery Standard Validation requirements for java-ai template

[Copilot]

This PR addresses all the AI Gallery Standard Validation issues identified in the automated validation report. The changes ensure the repository meets Microsoft's AI template standards for inclusion in the AI Gallery.

Repository Management Issues Fixed ✅

• README.md sections: Added missing required sections:

  • ## Features - Comprehensive overview of AI capabilities and architecture
  • ## Getting Started - Quick start guide for both Azure deployment and local development
  • ## Guidance - Architecture decisions, best practices, and customization guidelines
  • ## Resources - Documentation links, learning resources, and community support

• Missing files created:

  • SECURITY.md - Microsoft standard security policy and vulnerability reporting process
  • CONTRIBUTING.md - Comprehensive contribution guidelines including CLA requirements, code style, and development setup
  • ISSUE_TEMPLATE.md - Structured template for bug reports and feature requests

Source Code Structure Issues Fixed ✅

• azure-dev.yml: Created missing file (identical to azure.yaml for compatibility with different azd versions)

Functional Requirements Fixed ✅

• azd up failure: Fixed storage account naming issue that was causing deployment failures
  • Problem: Storage account names like stai41344882507130devuh4e6 exceeded Azure's 24-character limit
  • Solution: Modified bicep template to use take(replace(workloadName, '-', ''), 6) limiting total name length to max 17 characters
  • Pattern: st + max 6 chars from workload + environment + 5 char unique string = ≤17 chars (well under 24 limit)

Security Requirements Fixed ✅

• Azure OpenAI local authentication: Added disableLocalAuth: true to Azure OpenAI resource in bicep template
  • Enforces Entra ID authentication only (no access keys)
  • Addresses security scan warning AZR-000282

Testing Performed

• ✅ Java common module builds successfully
• ✅ Bicep template syntax validated
• ✅ All required files present and properly formatted
• ✅ Storage account naming formula verified to stay under Azure limits

Note

Repository topics (azd-templates, ai-azd-templates) require GitHub repository admin access to configure and cannot be set via code changes.

Fixes #43.

Warning

Firewall rules blocked me from connecting to one or more addresses

I tried to connect to the following addresses, but was blocked by firewall rules:

• aka.ms
  • Triggering command: bicep build infra/bicep/main.bicep (dns block)
• app.aladdin.microsoft.com
  • Triggering command: /usr/bin/../../opt/az/bin/python3 -Im azure.cli bicep --version (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to my firewall allow list

---

💬 Share your feedback on Copilot coding agent for the chance to win a $200 gift card! Click here to start the survey.

[SandraAhlgrimm]

@microsoft-github-policy-service agree company="Microsoft"

[SandraAhlgrimm]

@microsoft-github-policy-service agree

[SandraAhlgrimm]

@microsoft-github-policy-service agree [company="Microsoft"]

[SandraAhlgrimm]

@copilot please read the following Contributor License Agreement(CLA). If you agree with the CLA, please reply with the following information.

@microsoft-github-policy-service agree [company="{your company}"]

Options:

• (default - no company specified) I have sole ownership of intellectual property rights to my Submissions and I am not making Submissions in the course of work for my employer.

@microsoft-github-policy-service agree

• (when company given) I am making Submissions in the course of work for my employer (or my employer has intellectual property rights in my Submissions by contract or applicable law). I have permission from my employer to make Submissions and enter into this Agreement on behalf of my employer. By signing below, the defined term “You” includes me and my employer.

@microsoft-github-policy-service agree company="Microsoft"

Contributor License Agreement

@copilot please read the following Contributor License Agreement(CLA). If you agree with the CLA, please reply with the following information.

@microsoft-github-policy-service agree [company="{your company}"]

Options:

• (default - no company specified) I have sole ownership of intellectual property rights to my Submissions and I am not making Submissions in the course of work for my employer.

@microsoft-github-policy-service agree

• (when company given) I am making Submissions in the course of work for my employer (or my employer has intellectual property rights in my Submissions by contract or applicable law). I have permission from my employer to make Submissions and enter into this Agreement on behalf of my employer. By signing below, the defined term “You” includes me and my employer.

@microsoft-github-policy-service agree company="Microsoft"

Contributor License Agreement

@microsoft-github-policy-service agree [company="Microsoft"]

[Copilot]

@copilot please read the following Contributor License Agreement(CLA). If you agree with the CLA, please reply with the following information.

...

@microsoft-github-policy-service agree company="Microsoft"

[SandraAhlgrimm]

@microsoft-github-policy-service agree company="Microsoft"