Sync plugin files from GitHub-Copilot-for-Azure (run 30089858732) - #393
Merged
JasonYeMSFT (JasonYeMSFT) merged 1 commit intoJul 24, 2026
Merged
Conversation
Contributor
There was a problem hiding this comment.
Pull request overview
Note
Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.
Adds new Azure AI Foundry toolbox tool references and refines Copilot app entry behavior, while expanding Azure App Onboard pipeline documentation and schemas.
Changes:
- Added new Foundry toolbox reference docs for multiple tool types (web search, code interpreter, file search, MCP variants, Fabric IQ, browser automation) plus MCP protocol/testing guidance.
- Replaced “canvas-first entry” checks with Copilot app entry preflight scripts that auto-install the
microsoft-foundryplugin in the Copilot app environment. - Added extensive Azure App Onboard reference documentation (pipeline rules, validation, schemas, deploy safety), and bumped plugin/changelog versions.
Reviewed changes
Copilot reviewed 128 out of 128 changed files in this pull request and generated 1 comment.
Show a summary per file
| File | Description |
|---|---|
| .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-web-search.md | Adds a toolbox reference for the connectionless web_search tool (CLI + azure.yaml). |
| .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-user-entra-token.md | Adds reference for remote MCP with forwarded user Entra token (UserEntraToken). |
| .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-noauth.md | Adds reference for public/no-auth remote MCP server toolbox attachment. |
| .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-key-auth.md | Adds reference for remote MCP using static key auth (custom headers). |
| .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-custom-oauth-azure-starter.md | Adds Azure Functions “starter” flow for BYO OAuth2 MCP servers. |
| .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-file-search.md | Adds reference for file_search tool including vector store prerequisite. |
| .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-fabric-iq.md | Adds reference for Fabric IQ preview tool wiring via MCP-style fields. |
| .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-code-interpreter.md | Adds reference for code_interpreter tool including verification calls. |
| .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-browser-automation.md | Adds reference for browser automation preview tool with Playwright workspace connection shape. |
| .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/mcp-protocol.md | Adds MCP endpoint/protocol/tool naming/testing/troubleshooting guidance. |
| .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/check-copilot-app-entry.sh | New bash preflight to auto-install the Foundry plugin in Copilot app environment. |
| .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/check-copilot-app-entry.ps1 | New PowerShell preflight equivalent for Copilot app environment. |
| .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/check-canvas-entry.sh | Removes older canvas-first gate check script (bash). |
| .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/check-canvas-entry.ps1 | Removes older canvas-first gate check script (PowerShell). |
| .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-openapi.md | Updates multi-tool constraint link to new toolbox reference location. |
| .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-code-interpreter.md | Removes outdated toolbox-reference link under references. |
| .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/agent-tools.md | Removes references to deprecated toolbox-reference doc and trims index content. |
| .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tool-tool-search.md | Removes Tool Search reference file (preview). |
| .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tool-a2a.md | Adds toolbox attachment steps and --from-file snippet for A2A connections. |
| .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/foundry-tool-catalog.md | Retargets toolbox endpoint/protocol references to other docs; updates endpoint guidance. |
| .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/quick-start-hosted.md | Switches quickstart preflight to new Copilot app entry script. |
| .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/azd-guidance/references/azd-ai-cli.md | Updates toolbox env var guidance and link target. |
| .github/plugins/azure-skills/skills/microsoft-foundry/SKILL.md | Bumps skill version and refines create vs quickstart positioning. |
| .github/plugins/azure-skills/skills/azure-validate/SKILL.md | Clarifies deploy intent gating: deploy only when user asked to deploy. |
| .github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/waf-checklist.md | Adds WAF checklist reference for scaffold self-review. |
| .github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/validation-and-manifest.md | Adds validation + manifest write protocol and deploy gate instructions. |
| .github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/subagent-review.md | Adds subagent template for security/adversarial review steps. |
| .github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/self-review-procedure.md | Adds self-review procedure and subagent prompt instructions. |
| .github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/self-healing.md | Adds a scaffold self-healing loop classification table. |
| .github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/scaffold-schemas.ts | Introduces scaffold-manifest schema TS interfaces. |
| .github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/scaffold-healing-rules.md | Adds scaffold healing rules including PLAN_LEVEL_CHANGE protocol. |
| .github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/rbac-roles.md | Adds shared RBAC role GUID reference + Cosmos DB data plane notes. |
| .github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/error-handling.md | Adds scaffold error handling mapping to remediation actions. |
| .github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/env-var-secrets.md | Adds cross-cutting rules for env var derivation and secret handling. |
| .github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/dockerfile-generation.md | Adds Dockerfile generation guidance including ACR build limitations. |
| .github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/cicd-pipelines.md | Adds CI/CD deferral note and guidance tool call for later. |
| .github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/bicep-swa.md | Adds Bicep patterns for detached Static Web Apps deployments. |
| .github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/bicep-patterns-data.md | Adds Bicep templates for PostgreSQL/MySQL/Redis data modules. |
| .github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/bicep-app-service.md | Adds App Service Bicep patterns including MI and deploy strategy notes. |
| .github/plugins/azure-skills/skills/azure-app-onboard/references/subscription-resolution.md | Adds defensive subscription resolution fallback flow. |
| .github/plugins/azure-skills/skills/azure-app-onboard/references/pipeline-rules.md | Adds cross-cutting pipeline approval/phase/artifact rules. |
| .github/plugins/azure-skills/skills/azure-app-onboard/references/pipeline-rules-runtime.md | Adds known platform bugs, deploy timing, and shell rules reference. |
| .github/plugins/azure-skills/skills/azure-app-onboard/references/mcp-tool-reference.md | Adds shared Azure MCP tool index and global parameter guidance. |
| .github/plugins/azure-skills/skills/azure-app-onboard/references/intent-gathering.md | Adds scope triage and post-prereq intent gathering rules. |
| .github/plugins/azure-skills/skills/azure-app-onboard/references/iac-resources.md | Adds official IaC docs/tooling index for troubleshooting. |
| .github/plugins/azure-skills/skills/azure-app-onboard/references/azd-template-routing.md | Adds routing protocol when an azd template is detected. |
| .github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/validation-rubric.md | Adds prepare-phase plan validation rubric (4 dimensions). |
| .github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/subagent-quota.md | Adds quota validation subagent template and output schema. |
| .github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/subagent-pricing.md | Adds pricing subagent template with retail prices API rules. |
| .github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/sku-matrix.md | Adds SKU selection matrix and fast-track logic. |
| .github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/pricing-guide.md | Adds pricing methodology (live API requirement, unit multipliers, fallback). |
| .github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/naming-patterns.md | Adds deterministic naming scheme and per-resource constraints. |
| .github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/mcp-tools.md | Adds prepare-phase-specific MCP tool parameters and anti-patterns. |
| .github/plugins/azure-skills/skills/azure-app-onboard/prepare/SKILL.md | Introduces/updates prepare phase workflow and delegation rules. |
| .github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/subagent-preflight.md | Adds deploy preflight/checklist generation subagent template. |
| .github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/preflight-checks.md | Adds deploy preflight checks including mandatory what-if and RBAC checks. |
| .github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/portal-links.md | Adds deterministic portal link generation rules (PowerShell-based). |
| .github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/mcp-tools.md | Adds deploy-phase MCP tool parameter reference. |
| .github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/health-check-patterns.md | Adds post-deploy health verification patterns and pitfalls. |
| .github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/error-classification.md | Adds deploy-time error classification and healing logging guidance. |
| .github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/deploy-schemas.ts | Introduces deploy-result schema TS interfaces. |
| .github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/deploy-safety.md | Adds deploy safety constraints, 403 fallback protocol, and reconciliation rules. |
| .github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/database-post-deploy.md | Adds DB creation/migration verification steps and troubleshooting. |
| .github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/code-deployment-swa.md | Adds SWA deploy steps including Windows path workaround and token handling. |
| .github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/code-deployment-appservice.md | Adds App Service zipdeploy/Kudu guidance and zip creation pitfalls. |
| .github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/blocked-patterns.md | Defines blocked commands/patterns during deploy (safety + drift control). |
| .github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/approval-gate-template.md | Adds deploy approval gate display/handlers template. |
| .github/plugins/azure-skills/skills/azure-app-onboard/SKILL.md | Updates AppOnboard orchestrator skill doc with strict pipeline rules. |
| .github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/zero-code-path.md | Adds zero-code starter scaffold rules and build-validation gates. |
| .github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/subscription-resolution.md | Adds defensive subscription resolution fallback in prereq path. |
| .github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/subagent-starter-scaffold.md | Adds subagent template for generating a minimal starter app (no infra). |
| .github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/remediation-protocol.md | Adds prereq remediation loop protocol with re-evaluation rules. |
| .github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/readiness-gate.md | Adds readiness scoring rules and artifact write ordering mandates. |
| .github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/prereq-schemas.ts | Introduces prereq-output schema TS interfaces. |
| .github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/prereq-artifacts.md | Adds prereq phase artifact write contract and required fields. |
| .github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/deployability-check.md | Adds static-only deployability assessment guidance and routing. |
| .github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/component-mapping.md | Adds component→Azure mapping and infra detection rules. |
| .github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/completeness-check.md | Adds deterministic completeness checks (entry point, config, ports, etc.). |
| .github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/cloud-sdk-migration.md | Adds classification table for non-Azure cloud SDK dependencies. |
| .github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/build-check.md | Adds static build health detection and optional user-approved build execution gate. |
| .github/plugins/azure-skills/CHANGELOG.md | Adds changelog entries up to 1.2.5. |
| .github/plugins/azure-skills/.plugin/plugin.json | Bumps plugin version to 1.2.5. |
| .github/plugins/azure-skills/.cursor-plugin/plugin.json | Bumps Cursor plugin version to 1.2.5. |
| .github/plugins/azure-skills/.claude-plugin/plugin.json | Bumps Claude plugin version to 1.2.5. |
Comments suppressed due to low confidence (5)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/check-copilot-app-entry.sh:1
- Capturing
2>&1intoplugins_jsoncan break JSON parsing whencopilot plugins list --jsonreturns valid JSON on stdout but also prints warnings/progress to stderr. That makes plugin detection flaky and may skip auto-installation even in the intended Copilot app environment. Prefer capturing stdout only for the JSON payload (and capture stderr separately for diagnostics), or use a CLI flag that suppresses non-JSON output if available.
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/check-copilot-app-entry.ps1:1 - Similar to the bash script,
2>&1can mix stderr warnings into the JSON stream and causeConvertFrom-Jsonto fail even when the command succeeded. Additionally,Write-Outputwrites warnings to stdout, which can pollute output for callers that expect a clean stdout channel. Consider capturing stdout-only for JSON and routing warnings to stderr (e.g.,Write-WarningorWrite-Errorwith non-terminating behavior) to make the preflight more reliable.
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/check-copilot-app-entry.ps1:1 - Similar to the bash script,
2>&1can mix stderr warnings into the JSON stream and causeConvertFrom-Jsonto fail even when the command succeeded. Additionally,Write-Outputwrites warnings to stdout, which can pollute output for callers that expect a clean stdout channel. Consider capturing stdout-only for JSON and routing warnings to stderr (e.g.,Write-WarningorWrite-Errorwith non-terminating behavior) to make the preflight more reliable.
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/foundry-tool-catalog.md:1 - This paragraph claims
use-toolbox-in-hosted-agent.mdis the reference for MCP endpoint/protocol/testing, but this PR also addstoolbox/references/mcp-protocol.md, which appears to be the dedicated protocol/testing doc. Linking here to the protocol-specific doc (and optionally additionally to the hosted-agent wiring doc) would make the references clearer and reduce doc drift.
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/azd-guidance/references/azd-ai-cli.md:1 - The Foundry toolbox docs added/updated in this PR frequently show hosted agents consuming toolboxes via
TOOLBOX_NAME(toolbox name resolved at runtime), while this line states consumption viaTOOLBOX_ENDPOINT. If both are supported in different scenarios (hosted agent vs external MCP client), this doc should explicitly distinguish when to use each env var and link to the specific reference section(s). As written, it can mislead users into setting the wrong env var for the hosted-agent path.
Comment on lines
+26
to
+27
| | Inline secret values in CLI args | ⛔ Block | `--parameters password=MyP@ss$word!` breaks shell escaping and leaks secrets in terminal history. Pass secrets via `main.parameters.json`, `terraform.tfvars`, or `az keyvault secret set --file`. | | ||
| | Writing secrets to temp files on disk | ⛔ Block | ⛔ NEVER write secrets to temp files on disk. Seed secrets into Key Vault via `az keyvault secret set`, then reference via SecretUri in IaC. Temp files risk exposure in crash dumps, logs, and unprotected storage. | |
JasonYeMSFT (JasonYeMSFT)
approved these changes
Jul 24, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Automated sync of
plugin/from GitHub-Copilot-for-Azure at commitcb722059a80918be44c36537ea6bd0cb4929feeb.