Remove Azure DevOps PAT used for VMR synchronization - #6384
#6384Merged
premun merged 1 commit intoJun 10, 2026
dotnet:maindotnet/arcade-services:mainfrom
premun:prvysoky/secret-removalpremun/arcade-services:prvysoky/secret-removalCopy head branch name to clipboard
Merged
Remove Azure DevOps PAT used for VMR synchronization#6384premun merged 1 commit intodotnet:maindotnet/arcade-services:mainfrom premun:prvysoky/secret-removalpremun/arcade-services:prvysoky/secret-removalCopy head branch name to clipboard
premun merged 1 commit into
dotnet:maindotnet/arcade-services:mainfrom
premun:prvysoky/secret-removalpremun/arcade-services:prvysoky/secret-removalCopy head branch name to clipboard
Conversation
Contributor
There was a problem hiding this comment.
Pull request overview
Removes the Azure DevOps PAT secret definition from the VMR synchronization vault configuration as part of transitioning VMR sync pipelines away from PAT-based authentication (issue #6062).
Changes:
- Deletes the
dn-bot-all-orgs-code-razure-devops-access-tokensecret entry from.vault-config/vmr-synchronization.1.yaml.
Comments suppressed due to low confidence (1)
.vault-config/vmr-synchronization.1.yaml:21
- This vault config no longer provisions the
dn-bot-all-orgs-code-rsecret, but the VMR sync pipeline steps still reference it and pass it tovmr-sync.(sh|ps1)as--azdev-pat/-azdevPat(seeeng/common/templates/steps/vmr-sync.ymlaround the additionalSyncs steps). With this removed, that variable will be empty/unset and the sync is likely to fail when cloning private AzDO repos.
Either update the pipeline/template to use the new MI-based token variable (e.g., $(AzdoToken)) for the additionalSyncs path as well, or keep this secret mapping until those references are removed.
secrets:
BotAccount-dotnet-bot:
type: github-account
parameters:
Name: dotnet-bot
premun
enabled auto-merge (squash)
June 10, 2026 09:28
oleksandr-didyk
approved these changes
Jun 10, 2026
premun
disabled auto-merge
June 10, 2026 09:35
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Fixes #6062