From 049e35d43bb8c6f1e70706752e03de1487cf6fbd Mon Sep 17 00:00:00 2001
From: Goutam Kumar Nettem <107709351+v-gonett@users.noreply.github.com>
Date: Mon, 15 Jun 2026 15:02:39 -0700
Subject: [PATCH] Refactor TelemetryHelper credential handling

Updated TelemetryHelper to use ManagedIdentityCredential in production and DefaultAzureCredential in development.
---
 .../ServiceHelper/TelemetryHelper.cs                      | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/source/dotnet/DevTools/Core/Approvals.SupportServices.Helper/ServiceHelper/TelemetryHelper.cs b/source/dotnet/DevTools/Core/Approvals.SupportServices.Helper/ServiceHelper/TelemetryHelper.cs
index d09759a..b04b6f8 100644
--- a/source/dotnet/DevTools/Core/Approvals.SupportServices.Helper/ServiceHelper/TelemetryHelper.cs
+++ b/source/dotnet/DevTools/Core/Approvals.SupportServices.Helper/ServiceHelper/TelemetryHelper.cs
@@ -40,7 +40,11 @@ public TelemetryHelper(ConfigurationHelper configurationHelper,
         _environment = actionContextAccessor?.ActionContext?.RouteData?.Values["env"]?.ToString();
         _configurationHelper = configurationHelper;
         _httpHelper = httpHelper;
-        _tokenCredential = tokenCredential ?? new DefaultAzureCredential();
+        #if DEBUG
+            _tokenCredential = tokenCredential ?? new DefaultAzureCredential(); // CodeQL [SM05137] Suppress CodeQL issue since we only use DefaultAzureCredential in development environments.
+        #else
+            _tokenCredential = tokenCredential ?? new ManagedIdentityCredential();
+        #endif
     }
 
     /// <summary>
@@ -124,4 +128,4 @@ private void MergeAIScopeResponse(ref JObject response, JObject responseData)
                 rows.Add(row);
         }
     }
-}
\ No newline at end of file
+}