You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
-`.github/workflows/test-all.yml` — Orchestrator that calls CI, then both integration-test workflows sequentially
16
16
@@ -21,7 +21,7 @@ These workflows expect:
21
21
- GitHub environment `integration-test` (shared by all integration workflows)
22
22
- Azure identity with enough permissions to deploy resources and create role assignments in test resource groups
23
23
24
-
The `test-all.yml` orchestrator calls `ci.yml` (no Azure prereqs), then `test-resource-types.yml` and `test-redact-secrets.yml`. The called workflows access secrets directly from the `integration-test` environment — no secret pass-through from the orchestrator is needed.
24
+
The `test-all.yml` orchestrator calls `ci.yml` (no Azure prereqs), then `test-round-trip.yml` and `test-redact-secrets.yml`. The called workflows access secrets directly from the `integration-test` environment — no secret pass-through from the orchestrator is needed.
@@ -149,7 +149,7 @@ gh secret set APIM_PUBLISHER_EMAIL \
149
149
150
150
### 6) Verify Called Workflows Can Access Environment Secrets
151
151
152
-
The `test-all.yml` orchestrator does **not** pass secrets to called workflows. Instead, the called workflows (`test-resource-types.yml`, `test-redact-secrets.yml`) access secrets directly via their `environment: integration-test` declaration. Each called workflow includes a "Validate Required Secrets" step that fails fast with a clear error if any secret is missing.
152
+
The `test-all.yml` orchestrator does **not** pass secrets to called workflows. Instead, the called workflows (`test-round-trip.yml`, `test-redact-secrets.yml`) access secrets directly via their `environment: integration-test` declaration. Each called workflow includes a "Validate Required Secrets" step that fails fast with a clear error if any secret is missing.
153
153
154
154
No repo-level secrets are required — all secrets are scoped to the `integration-test` environment.
0 commit comments