Skip to content

feat: add workload identity validation/fix command - #173

Merged
nilsgstrabo merged 37 commits into
masterfrom
162-add-check-issuer-feature
Jun 22, 2026
Merged

feat: add workload identity validation/fix command#173
nilsgstrabo merged 37 commits into
masterfrom
162-add-check-issuer-feature

Conversation

@nilsgstrabo

Copy link
Copy Markdown
Contributor

No description provided.

@nilsgstrabo nilsgstrabo self-assigned this May 29, 2026
@nilsgstrabo nilsgstrabo linked an issue May 29, 2026 that may be closed by this pull request
1 task

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR introduces a new authentication/provider setup (supporting workload identity and other Azure auth flows) and regenerates the swagger clients/models accordingly, so the CLI can acquire and attach scoped access tokens consistently across commands.

Changes:

  • Refactor CLI authentication to a new pkg/auth provider with scope-aware token retrieval (MSAL interactive/device code, GitHub OIDC, workload identity, client secret).
  • Update pkg/client to use the new auth provider via a runtime.ClientAuthInfoWriter adapter.
  • Regenerate generated/radixapi and generated/vulnscanapi (plus update build/CI tooling versions) to reflect updated swagger/codegen behavior.

Reviewed changes

Copilot reviewed 26 out of 291 changed files in this pull request and generated 4 comments.

Show a summary per file
File Description
pkg/utils/completion/scheduled-job.go Import ordering cleanup.
pkg/utils/completion/scheduled-batch.go Import ordering cleanup.
pkg/client/client.go Switch client auth wiring to new pkg/auth provider and add auth-writer adapter.
pkg/client/auth/msal_interactive.go Removed legacy auth implementation (moved to pkg/auth).
pkg/client/auth/msal_devicecode.go Removed legacy auth implementation (moved to pkg/auth).
pkg/client/auth/azure_client_secret.go Removed legacy auth implementation (moved to pkg/auth).
pkg/auth/utils.go Add scope-based access-token cache key helper.
pkg/auth/msal_token_cache.go Update token cache to use new auth cache item type.
pkg/auth/msal_interactive.go Add MSAL interactive auth implementation under new auth package.
pkg/auth/msal_devicecode.go Add MSAL device-code auth implementation under new auth package.
pkg/auth/cache/cache.go Change cache GetItem to return a structured Item with expiry metadata.
pkg/auth/azure_github.go Update GitHub OIDC auth to be scope-aware and use new cache package.
pkg/auth/azure_federatedcredentials.go Update workload identity (federated credentials) auth to be scope-aware and use new cache package.
pkg/auth/azure_client_secret.go Reintroduce client-secret auth under new auth package (now scope-aware).
pkg/auth/adapter/azure.go Add adapter to expose pkg/auth as an Azure TokenCredential-like interface.
Makefile Bump bootstrap tool versions (swagger, golangci-lint).
Dockerfile Bump builder Go image version.
cmd/restartPipelineJob.go Import formatting cleanup.
cmd/getVulnerability.go Import formatting cleanup.
.vscode/launch.json Add launch config for validate workload-identity.
.github/workflows/ci.yml Update action pins and golangci-lint version.
.github/workflows/cd.yml Update action pins for release workflow.
generated/vulnscanapi/models/vulnerability.go Swagger regen: enum typing updates (any).
generated/vulnscanapi/models/image_scan.go Swagger regen: use errors.As for validation error handling.
generated/vulnscanapi/models/environment_vulnerabilities.go Swagger regen: use errors.As for validation error handling.
generated/vulnscanapi/models/component_vulnerabilities.go Swagger regen: use errors.As for validation error handling.
generated/vulnscanapi/models/application_vulnerabilities.go Swagger regen: use errors.As for validation error handling.
generated/vulnscanapi/client/vulnerability/get_job_vulnerabilities_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/vulnscanapi/client/vulnerability/get_environment_vulnerability_summary_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/vulnscanapi/client/vulnerability/get_component_vulnerabilities_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/vulnscanapi/client/vulnerability/get_application_vulnerability_summaries_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/models/update_receiver_config_secrets.go Swagger regen: use errors.As for validation error handling.
generated/radixapi/models/update_receiver_config_secrets_map.go Swagger regen: use errors.As for validation error handling.
generated/radixapi/models/update_alerting_config.go Swagger regen: use errors.As for validation error handling.
generated/radixapi/models/tls.go Swagger regen: any enums + errors.As validation handling.
generated/radixapi/models/tls_automation.go Swagger regen: any enums.
generated/radixapi/models/sub_pipeline_task_step.go Swagger regen: any enums.
generated/radixapi/models/step.go Swagger regen: any enums + errors.As validation handling.
generated/radixapi/models/secret.go Swagger regen: updated Type enum + Updated field to strfmt.DateTime with validation.
generated/radixapi/models/scheduled_batch_summary.go Swagger regen: any enums + errors.As validation handling.
generated/radixapi/models/resource_requirements.go Swagger regen: use errors.As for validation error handling.
generated/radixapi/models/replica_summary.go Swagger regen: any enums + errors.As validation handling.
generated/radixapi/models/replica_status.go Swagger regen: any enums.
generated/radixapi/models/replica_resources_utilization_response.go Swagger regen: use errors.As for validation error handling.
generated/radixapi/models/receiver_config.go Swagger regen: use errors.As for validation error handling.
generated/radixapi/models/receiver_config_secret_status.go Swagger regen: use errors.As for validation error handling.
generated/radixapi/models/receiver_config_secret_status_map.go Swagger regen: use errors.As for validation error handling.
generated/radixapi/models/receiver_config_map.go Swagger regen: use errors.As for validation error handling.
generated/radixapi/models/pipeline_run.go Swagger regen: any enums.
generated/radixapi/models/pipeline_run_task.go Swagger regen: any enums.
generated/radixapi/models/pipeline_run_task_step.go Swagger regen: any enums.
generated/radixapi/models/pipeline_parameters_deploy.go Swagger regen: example update.
generated/radixapi/models/pipeline_parameters_build.go Swagger regen: remove fields + any enums + comment fixes.
generated/radixapi/models/job_summary.go Swagger regen: example update + any enums.
generated/radixapi/models/image_hub_secret.go Swagger regen: any enums.
generated/radixapi/models/identity.go Swagger regen: use errors.As for validation error handling.
generated/radixapi/models/horizontal_scaling_summary.go Swagger regen: use errors.As for validation error handling.
generated/radixapi/models/horizontal_scaling_summary_trigger.go Swagger regen: add new trigger model + errors.As validation handling.
generated/radixapi/models/external_dns.go Swagger regen: use errors.As for validation error handling.
generated/radixapi/models/event.go Swagger regen: use errors.As for validation error handling.
generated/radixapi/models/environment_utilization.go Swagger regen: use errors.As for validation error handling.
generated/radixapi/models/environment_summary.go Swagger regen: any enums + errors.As validation handling.
generated/radixapi/models/env_var.go Swagger regen: use errors.As for validation error handling.
generated/radixapi/models/dns_alias.go Swagger regen: use errors.As for validation error handling.
generated/radixapi/models/component_utilization.go Swagger regen: use errors.As for validation error handling.
generated/radixapi/models/component_summary.go Swagger regen: any enums + errors.As validation handling.
generated/radixapi/models/build_secret.go Swagger regen: any enums.
generated/radixapi/models/auxiliary_resource.go Swagger regen: simplify AuxiliaryResource to any.
generated/radixapi/models/auxiliary_resource_deployment.go Swagger regen: any enums + errors.As validation handling.
generated/radixapi/models/application_registration_upsert_response.go Swagger regen: use errors.As for validation error handling.
generated/radixapi/models/application_registration_request.go Swagger regen: use errors.As for validation error handling.
generated/radixapi/models/application_registration_patch_request.go Swagger regen: use errors.As for validation error handling.
generated/radixapi/models/alerting_config.go Swagger regen: use errors.As for validation error handling.
generated/radixapi/models/alert_config_list.go Swagger regen: use errors.As for validation error handling.
generated/radixapi/client/platform/show_applications_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/platform/show_applications_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/platform/register_application_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/platform/register_application_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/platform/get_search_applications_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/pipeline_job/stop_application_job_responses.go Swagger regen: any return type.
generated/radixapi/client/pipeline_job/stop_application_job_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/pipeline_job/rerun_application_job_responses.go Swagger regen: any return type.
generated/radixapi/client/pipeline_job/rerun_application_job_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/pipeline_job/get_tekton_pipeline_runs_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/pipeline_job/get_tekton_pipeline_runs_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/pipeline_job/get_tekton_pipeline_run_tasks_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/pipeline_job/get_tekton_pipeline_run_tasks_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/pipeline_job/get_tekton_pipeline_run_task_steps_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/pipeline_job/get_tekton_pipeline_run_task_steps_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/pipeline_job/get_tekton_pipeline_run_task_step_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/pipeline_job/get_tekton_pipeline_run_task_step_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/pipeline_job/get_tekton_pipeline_run_task_step_logs_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/pipeline_job/get_tekton_pipeline_run_task_step_logs_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/pipeline_job/get_tekton_pipeline_run_task_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/pipeline_job/get_tekton_pipeline_run_task_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/pipeline_job/get_tekton_pipeline_run_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/pipeline_job/get_tekton_pipeline_run_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/pipeline_job/get_pipeline_job_step_logs_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/pipeline_job/get_pipeline_job_step_logs_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/pipeline_job/get_application_jobs_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/pipeline_job/get_application_jobs_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/pipeline_job/get_application_job_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/pipeline_job/get_application_job_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/job/stop_job_responses.go Swagger regen: any return type.
generated/radixapi/client/job/stop_job_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/job/stop_batch_responses.go Swagger regen: any return type.
generated/radixapi/client/job/stop_batch_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/job/stop_all_jobs_responses.go Swagger regen: any return type.
generated/radixapi/client/job/stop_all_jobs_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/job/stop_all_batches_responses.go Swagger regen: any return type.
generated/radixapi/client/job/stop_all_batches_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/job/stop_all_batches_and_jobs_for_job_component_responses.go Swagger regen: any return type.
generated/radixapi/client/job/stop_all_batches_and_jobs_for_job_component_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/job/stop_all_batches_and_jobs_for_environment_responses.go Swagger regen: any return type.
generated/radixapi/client/job/stop_all_batches_and_jobs_for_environment_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/job/restart_job_responses.go Swagger regen: any return type.
generated/radixapi/client/job/restart_job_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/job/restart_batch_responses.go Swagger regen: any return type.
generated/radixapi/client/job/restart_batch_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/job/job_log_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/job/job_log_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/job/get_jobs_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/job/get_jobs_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/job/get_job_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/job/get_job_payload_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/job/get_job_payload_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/job/get_job_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/job/get_job_component_deployments_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/job/get_job_component_deployments_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/job/get_batches_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/job/get_batches_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/job/get_batch_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/job/get_batch_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/job/delete_job_responses.go Swagger regen: any return type.
generated/radixapi/client/job/delete_job_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/job/delete_batch_responses.go Swagger regen: any return type.
generated/radixapi/client/job/delete_batch_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/job/copy_job_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/job/copy_job_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/job/copy_batch_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/job/copy_batch_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/environment/update_environment_alerting_config_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/environment/update_environment_alerting_config_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/environment/stop_environment_responses.go Swagger regen: any return type.
generated/radixapi/client/environment/stop_environment_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/environment/start_environment_responses.go Swagger regen: any return type.
generated/radixapi/client/environment/start_environment_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/environment/restart_environment_responses.go Swagger regen: any return type.
generated/radixapi/client/environment/restart_environment_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/environment/reset_manually_scaled_components_in_environment_responses.go Swagger regen: any return type.
generated/radixapi/client/environment/reset_manually_scaled_components_in_environment_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/environment/get_replica_events_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/environment/get_replica_events_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/environment/get_environment_summary_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/environment/get_environment_summary_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/environment/get_environment_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/environment/get_environment_resources_utilization_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/environment/get_environment_resources_utilization_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/environment/get_environment_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/environment/get_environment_events_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/environment/get_environment_events_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/environment/get_environment_alerting_config_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/environment/get_environment_alerting_config_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/environment/get_component_events_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/environment/get_component_events_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/environment/get_azure_key_vault_secret_versions_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/environment/get_azure_key_vault_secret_versions_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/environment/get_application_environment_deployments_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/environment/get_application_environment_deployments_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/environment/enable_environment_alerting_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/environment/enable_environment_alerting_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/environment/disable_environment_alerting_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/environment/disable_environment_alerting_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/environment/delete_environment_responses.go Swagger regen: any return type.
generated/radixapi/client/environment/delete_environment_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/environment/create_environment_responses.go Swagger regen: any return type.
generated/radixapi/client/environment/create_environment_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/environment/change_component_secret_responses.go Swagger regen: any return type.
generated/radixapi/client/environment/change_component_secret_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/deployment/get_deployment_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/deployment/get_deployment_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/deployment/deployment_client.go Swagger regen: comment/flow tweaks in generated client code.
generated/radixapi/client/configuration/get_configuration_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/configuration/configuration_client.go Swagger regen: comment/flow tweaks in generated client code.
generated/radixapi/client/component/update_component_external_dns_tls_responses.go Swagger regen: any return type.
generated/radixapi/client/component/update_component_external_dns_tls_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/component/stop_component_responses.go Swagger regen: any return type.
generated/radixapi/client/component/stop_component_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/component/start_component_responses.go Swagger regen: any return type.
generated/radixapi/client/component/start_component_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/component/scale_component_responses.go Swagger regen: any return type.
generated/radixapi/client/component/scale_component_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/component/restart_o_auth_auxiliary_resource_responses.go Swagger regen: any return type.
generated/radixapi/client/component/restart_o_auth_auxiliary_resource_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/component/restart_component_responses.go Swagger regen: any return type.
generated/radixapi/client/component/restart_component_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/component/reset_scaled_component_responses.go Swagger regen: any return type.
generated/radixapi/client/component/reset_scaled_component_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/component/replica_log_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/component/replica_log_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/component/log_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/component/log_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/component/get_o_auth_pod_log_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/component/get_o_auth_pod_log_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/component/env_vars_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/component/env_vars_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/component/components_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/component/components_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/component/change_env_var_responses.go Swagger regen: any return type.
generated/radixapi/client/component/change_env_var_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/buildstatus/get_build_status_responses.go Swagger regen: any return type.
generated/radixapi/client/buildstatus/buildstatus_client.go Swagger regen: comment/flow tweaks in generated client code.
generated/radixapi/client/application/update_private_image_hubs_secret_value_responses.go Swagger regen: any return type.
generated/radixapi/client/application/update_private_image_hubs_secret_value_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/update_build_secrets_secret_value_responses.go Swagger regen: any return type.
generated/radixapi/client/application/update_build_secrets_secret_value_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/update_application_alerting_config_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/application/update_application_alerting_config_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/trigger_pipeline_promote_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/application/trigger_pipeline_promote_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/trigger_pipeline_deploy_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/application/trigger_pipeline_deploy_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/trigger_pipeline_build_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/application/trigger_pipeline_build_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/trigger_pipeline_build_deploy_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/application/trigger_pipeline_build_deploy_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/trigger_pipeline_apply_config_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/application/trigger_pipeline_apply_config_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/stop_application_responses.go Swagger regen: any return type.
generated/radixapi/client/application/stop_application_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/start_application_responses.go Swagger regen: any return type.
generated/radixapi/client/application/start_application_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/restart_application_responses.go Swagger regen: any return type.
generated/radixapi/client/application/restart_application_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/reset_manually_scaled_components_in_application_responses.go Swagger regen: any return type.
generated/radixapi/client/application/reset_manually_scaled_components_in_application_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/regenerate_shared_secret_responses.go Swagger regen: any return type.
generated/radixapi/client/application/regenerate_shared_secret_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/regenerate_deploy_key_responses.go Swagger regen: any return type.
generated/radixapi/client/application/regenerate_deploy_key_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/modify_registration_details_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/application/modify_registration_details_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/list_pipelines_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/application/is_deploy_key_valid_responses.go Swagger regen: any return type.
generated/radixapi/client/application/is_deploy_key_valid_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/get_private_image_hubs_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/application/get_private_image_hubs_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/get_deployments_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/application/get_deployments_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/get_deploy_key_and_secret_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/application/get_deploy_key_and_secret_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/get_build_secrets_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/application/get_build_secrets_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/get_application_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/application/get_application_resources_utilization_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/application/get_application_resources_utilization_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/get_application_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/get_application_alerting_config_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/application/get_application_alerting_config_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/enable_application_alerting_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/application/enable_application_alerting_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/disable_application_alerting_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/application/disable_application_alerting_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/delete_application_responses.go Swagger regen: any return type.
generated/radixapi/client/application/delete_application_parameters.go Swagger regen: spelling fix (“comma-separated”).
generated/radixapi/client/application/change_registration_details_responses.go Swagger regen: any return type + errors.Is(io.EOF) handling.
generated/radixapi/client/application/change_registration_details_parameters.go Swagger regen: spelling fix (“comma-separated”).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread pkg/auth/azure_client_secret.go Outdated
Comment thread pkg/client/client.go Outdated
Comment thread pkg/client/client.go Outdated
Comment thread pkg/auth/adapter/azure.go Outdated
nilsgstrabo and others added 7 commits June 12, 2026 16:10

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 26 out of 296 changed files in this pull request and generated 1 comment.

Comments suppressed due to low confidence (1)

pkg/auth/azure_github.go:65

  • GetAccessToken ignores whether azure_client_id is present in cache. If the key is missing/expired, azureClientId.Content becomes empty and the subsequent MSAL call will fail with a less helpful error (and may not guide the user to re-login). Return a clear "please login again" error when the client ID is not cached.

Comment thread pkg/auth/utils.go
@nilsgstrabo
nilsgstrabo marked this pull request as ready for review June 16, 2026 14:22
@nilsgstrabo
nilsgstrabo merged commit 24fed23 into master Jun 22, 2026
6 checks passed
@nilsgstrabo
nilsgstrabo deleted the 162-add-check-issuer-feature branch June 22, 2026 07:02
@github-actions github-actions Bot mentioned this pull request Jun 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add check issuer feature

3 participants