Switch from bot PAT to GitHub App token via Azure Key Vault - #63538

Merged

Jake Bailey (jakebailey) merged 6 commits into

microsoft:mainfrom

jakebailey:github-app-keyvault-auth

Jun 8, 2026

Commits on Jun 5, 2026

Switch from bot PAT to GitHub App token via Azure Key Vault
Jake Bailey (jakebailey)
committed
3cededd
Tighten App token permissions to least privilege
Jake Bailey (jakebailey)
committed
17c0be8
Tighten remaining workflow token permissions
Jake Bailey (jakebailey)
committed
785f6b1

Commits on Jun 8, 2026

Use per-step GH_TOKEN env instead of exporting to GITHUB_ENV
Jake Bailey (jakebailey)
committed
4a06142
Remove token use from current release pipeline
Jake Bailey (jakebailey)
committed
a6c39aa
fmt
Jake Bailey (jakebailey)
committed
defed17