Skip to content

Sync plugin files from GitHub-Copilot-for-Azure (run 30089858732) - #393

Merged
JasonYeMSFT (JasonYeMSFT) merged 1 commit into
mainfrom
sync/copilot-for-azure-30089858732
Jul 24, 2026
Merged

Sync plugin files from GitHub-Copilot-for-Azure (run 30089858732)#393
JasonYeMSFT (JasonYeMSFT) merged 1 commit into
mainfrom
sync/copilot-for-azure-30089858732

Conversation

@ghcp4a-bot

@ghcp4a-bot ghcp4a-bot Bot commented Jul 24, 2026

Copy link
Copy Markdown

Automated sync of plugin/ from GitHub-Copilot-for-Azure at commit cb722059a80918be44c36537ea6bd0cb4929feeb.

Copilot AI review requested due to automatic review settings July 24, 2026 11:32

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Adds new Azure AI Foundry toolbox tool references and refines Copilot app entry behavior, while expanding Azure App Onboard pipeline documentation and schemas.

Changes:

  • Added new Foundry toolbox reference docs for multiple tool types (web search, code interpreter, file search, MCP variants, Fabric IQ, browser automation) plus MCP protocol/testing guidance.
  • Replaced “canvas-first entry” checks with Copilot app entry preflight scripts that auto-install the microsoft-foundry plugin in the Copilot app environment.
  • Added extensive Azure App Onboard reference documentation (pipeline rules, validation, schemas, deploy safety), and bumped plugin/changelog versions.

Reviewed changes

Copilot reviewed 128 out of 128 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-web-search.md Adds a toolbox reference for the connectionless web_search tool (CLI + azure.yaml).
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-user-entra-token.md Adds reference for remote MCP with forwarded user Entra token (UserEntraToken).
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-noauth.md Adds reference for public/no-auth remote MCP server toolbox attachment.
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-key-auth.md Adds reference for remote MCP using static key auth (custom headers).
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-custom-oauth-azure-starter.md Adds Azure Functions “starter” flow for BYO OAuth2 MCP servers.
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-file-search.md Adds reference for file_search tool including vector store prerequisite.
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-fabric-iq.md Adds reference for Fabric IQ preview tool wiring via MCP-style fields.
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-code-interpreter.md Adds reference for code_interpreter tool including verification calls.
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-browser-automation.md Adds reference for browser automation preview tool with Playwright workspace connection shape.
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/mcp-protocol.md Adds MCP endpoint/protocol/tool naming/testing/troubleshooting guidance.
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/check-copilot-app-entry.sh New bash preflight to auto-install the Foundry plugin in Copilot app environment.
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/check-copilot-app-entry.ps1 New PowerShell preflight equivalent for Copilot app environment.
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/check-canvas-entry.sh Removes older canvas-first gate check script (bash).
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/check-canvas-entry.ps1 Removes older canvas-first gate check script (PowerShell).
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-openapi.md Updates multi-tool constraint link to new toolbox reference location.
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-code-interpreter.md Removes outdated toolbox-reference link under references.
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/agent-tools.md Removes references to deprecated toolbox-reference doc and trims index content.
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tool-tool-search.md Removes Tool Search reference file (preview).
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tool-a2a.md Adds toolbox attachment steps and --from-file snippet for A2A connections.
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/foundry-tool-catalog.md Retargets toolbox endpoint/protocol references to other docs; updates endpoint guidance.
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/quick-start-hosted.md Switches quickstart preflight to new Copilot app entry script.
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/azd-guidance/references/azd-ai-cli.md Updates toolbox env var guidance and link target.
.github/plugins/azure-skills/skills/microsoft-foundry/SKILL.md Bumps skill version and refines create vs quickstart positioning.
.github/plugins/azure-skills/skills/azure-validate/SKILL.md Clarifies deploy intent gating: deploy only when user asked to deploy.
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/waf-checklist.md Adds WAF checklist reference for scaffold self-review.
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/validation-and-manifest.md Adds validation + manifest write protocol and deploy gate instructions.
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/subagent-review.md Adds subagent template for security/adversarial review steps.
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/self-review-procedure.md Adds self-review procedure and subagent prompt instructions.
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/self-healing.md Adds a scaffold self-healing loop classification table.
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/scaffold-schemas.ts Introduces scaffold-manifest schema TS interfaces.
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/scaffold-healing-rules.md Adds scaffold healing rules including PLAN_LEVEL_CHANGE protocol.
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/rbac-roles.md Adds shared RBAC role GUID reference + Cosmos DB data plane notes.
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/error-handling.md Adds scaffold error handling mapping to remediation actions.
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/env-var-secrets.md Adds cross-cutting rules for env var derivation and secret handling.
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/dockerfile-generation.md Adds Dockerfile generation guidance including ACR build limitations.
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/cicd-pipelines.md Adds CI/CD deferral note and guidance tool call for later.
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/bicep-swa.md Adds Bicep patterns for detached Static Web Apps deployments.
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/bicep-patterns-data.md Adds Bicep templates for PostgreSQL/MySQL/Redis data modules.
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/bicep-app-service.md Adds App Service Bicep patterns including MI and deploy strategy notes.
.github/plugins/azure-skills/skills/azure-app-onboard/references/subscription-resolution.md Adds defensive subscription resolution fallback flow.
.github/plugins/azure-skills/skills/azure-app-onboard/references/pipeline-rules.md Adds cross-cutting pipeline approval/phase/artifact rules.
.github/plugins/azure-skills/skills/azure-app-onboard/references/pipeline-rules-runtime.md Adds known platform bugs, deploy timing, and shell rules reference.
.github/plugins/azure-skills/skills/azure-app-onboard/references/mcp-tool-reference.md Adds shared Azure MCP tool index and global parameter guidance.
.github/plugins/azure-skills/skills/azure-app-onboard/references/intent-gathering.md Adds scope triage and post-prereq intent gathering rules.
.github/plugins/azure-skills/skills/azure-app-onboard/references/iac-resources.md Adds official IaC docs/tooling index for troubleshooting.
.github/plugins/azure-skills/skills/azure-app-onboard/references/azd-template-routing.md Adds routing protocol when an azd template is detected.
.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/validation-rubric.md Adds prepare-phase plan validation rubric (4 dimensions).
.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/subagent-quota.md Adds quota validation subagent template and output schema.
.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/subagent-pricing.md Adds pricing subagent template with retail prices API rules.
.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/sku-matrix.md Adds SKU selection matrix and fast-track logic.
.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/pricing-guide.md Adds pricing methodology (live API requirement, unit multipliers, fallback).
.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/naming-patterns.md Adds deterministic naming scheme and per-resource constraints.
.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/mcp-tools.md Adds prepare-phase-specific MCP tool parameters and anti-patterns.
.github/plugins/azure-skills/skills/azure-app-onboard/prepare/SKILL.md Introduces/updates prepare phase workflow and delegation rules.
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/subagent-preflight.md Adds deploy preflight/checklist generation subagent template.
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/preflight-checks.md Adds deploy preflight checks including mandatory what-if and RBAC checks.
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/portal-links.md Adds deterministic portal link generation rules (PowerShell-based).
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/mcp-tools.md Adds deploy-phase MCP tool parameter reference.
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/health-check-patterns.md Adds post-deploy health verification patterns and pitfalls.
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/error-classification.md Adds deploy-time error classification and healing logging guidance.
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/deploy-schemas.ts Introduces deploy-result schema TS interfaces.
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/deploy-safety.md Adds deploy safety constraints, 403 fallback protocol, and reconciliation rules.
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/database-post-deploy.md Adds DB creation/migration verification steps and troubleshooting.
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/code-deployment-swa.md Adds SWA deploy steps including Windows path workaround and token handling.
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/code-deployment-appservice.md Adds App Service zipdeploy/Kudu guidance and zip creation pitfalls.
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/blocked-patterns.md Defines blocked commands/patterns during deploy (safety + drift control).
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/approval-gate-template.md Adds deploy approval gate display/handlers template.
.github/plugins/azure-skills/skills/azure-app-onboard/SKILL.md Updates AppOnboard orchestrator skill doc with strict pipeline rules.
.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/zero-code-path.md Adds zero-code starter scaffold rules and build-validation gates.
.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/subscription-resolution.md Adds defensive subscription resolution fallback in prereq path.
.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/subagent-starter-scaffold.md Adds subagent template for generating a minimal starter app (no infra).
.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/remediation-protocol.md Adds prereq remediation loop protocol with re-evaluation rules.
.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/readiness-gate.md Adds readiness scoring rules and artifact write ordering mandates.
.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/prereq-schemas.ts Introduces prereq-output schema TS interfaces.
.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/prereq-artifacts.md Adds prereq phase artifact write contract and required fields.
.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/deployability-check.md Adds static-only deployability assessment guidance and routing.
.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/component-mapping.md Adds component→Azure mapping and infra detection rules.
.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/completeness-check.md Adds deterministic completeness checks (entry point, config, ports, etc.).
.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/cloud-sdk-migration.md Adds classification table for non-Azure cloud SDK dependencies.
.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/build-check.md Adds static build health detection and optional user-approved build execution gate.
.github/plugins/azure-skills/CHANGELOG.md Adds changelog entries up to 1.2.5.
.github/plugins/azure-skills/.plugin/plugin.json Bumps plugin version to 1.2.5.
.github/plugins/azure-skills/.cursor-plugin/plugin.json Bumps Cursor plugin version to 1.2.5.
.github/plugins/azure-skills/.claude-plugin/plugin.json Bumps Claude plugin version to 1.2.5.
Comments suppressed due to low confidence (5)

.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/check-copilot-app-entry.sh:1

  • Capturing 2>&1 into plugins_json can break JSON parsing when copilot plugins list --json returns valid JSON on stdout but also prints warnings/progress to stderr. That makes plugin detection flaky and may skip auto-installation even in the intended Copilot app environment. Prefer capturing stdout only for the JSON payload (and capture stderr separately for diagnostics), or use a CLI flag that suppresses non-JSON output if available.
    .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/check-copilot-app-entry.ps1:1
  • Similar to the bash script, 2>&1 can mix stderr warnings into the JSON stream and cause ConvertFrom-Json to fail even when the command succeeded. Additionally, Write-Output writes warnings to stdout, which can pollute output for callers that expect a clean stdout channel. Consider capturing stdout-only for JSON and routing warnings to stderr (e.g., Write-Warning or Write-Error with non-terminating behavior) to make the preflight more reliable.
    .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/check-copilot-app-entry.ps1:1
  • Similar to the bash script, 2>&1 can mix stderr warnings into the JSON stream and cause ConvertFrom-Json to fail even when the command succeeded. Additionally, Write-Output writes warnings to stdout, which can pollute output for callers that expect a clean stdout channel. Consider capturing stdout-only for JSON and routing warnings to stderr (e.g., Write-Warning or Write-Error with non-terminating behavior) to make the preflight more reliable.
    .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/foundry-tool-catalog.md:1
  • This paragraph claims use-toolbox-in-hosted-agent.md is the reference for MCP endpoint/protocol/testing, but this PR also adds toolbox/references/mcp-protocol.md, which appears to be the dedicated protocol/testing doc. Linking here to the protocol-specific doc (and optionally additionally to the hosted-agent wiring doc) would make the references clearer and reduce doc drift.
    .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/azd-guidance/references/azd-ai-cli.md:1
  • The Foundry toolbox docs added/updated in this PR frequently show hosted agents consuming toolboxes via TOOLBOX_NAME (toolbox name resolved at runtime), while this line states consumption via TOOLBOX_ENDPOINT. If both are supported in different scenarios (hosted agent vs external MCP client), this doc should explicitly distinguish when to use each env var and link to the specific reference section(s). As written, it can mislead users into setting the wrong env var for the hosted-agent path.

Comment on lines +26 to +27
| Inline secret values in CLI args | ⛔ Block | `--parameters password=MyP@ss$word!` breaks shell escaping and leaks secrets in terminal history. Pass secrets via `main.parameters.json`, `terraform.tfvars`, or `az keyvault secret set --file`. |
| Writing secrets to temp files on disk | ⛔ Block | ⛔ NEVER write secrets to temp files on disk. Seed secrets into Key Vault via `az keyvault secret set`, then reference via SecretUri in IaC. Temp files risk exposure in crash dumps, logs, and unprotected storage. |
@JasonYeMSFT
JasonYeMSFT (JasonYeMSFT) merged commit 4f1db7e into main Jul 24, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants