build.yaml

name: AspireShopWithSemanticKernel CI
on:
  workflow_dispatch:
  push:
    branches:
      - main
    paths-ignore:
      - '**.md'
  pull_request:
    branches:
      - main
    paths-ignore:
      - '**.md'

permissions:
  id-token: write
  contents: read

jobs:
  build:
    runs-on: ubuntu-latest
    env:
      AZURE_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
      AZURE_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
      AZURE_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}
      AZURE_CREDENTIALS: ${{ secrets.AZURE_CREDENTIALS }}
      AZURE_ENV_NAME: ${{ vars.AZURE_ENV_NAME }}
      AZURE_LOCATION: ${{ vars.AZURE_LOCATION }}
    steps:
      - name: 🌱Checkout the branch
        uses: actions/checkout@v4
        
      - name: 📦Install .NET SDK
        uses: actions/setup-dotnet@v4
        with:
          dotnet-version: 8.0.200
            
      - name: ⚙️Install azd
        uses: Azure/setup-azd@v1.0.0
        
      - name: 🦾Install .NET Aspire workload
        run: dotnet workload install aspire
        
      - name: Log in with Azure (Federated Credentials)
        if: ${{ env.AZURE_CLIENT_ID != '' }}
        run: |
            azd auth login `
              --client-id "$Env:AZURE_CLIENT_ID" `
              --federated-credential-provider "github" `
              --tenant-id "$Env:AZURE_TENANT_ID"
        shell: pwsh
          
      - name: 🗝️Log in with Azure (Client Credentials)
        if: ${{ env.AZURE_CREDENTIALS != '' }}
        run: |
          $info = $Env:AZURE_CREDENTIALS | ConvertFrom-Json -AsHashtable;
          Write-Host "::add-mask::$($info.clientSecret)"

          azd auth login `
            --client-id "$($info.clientId)" `
            --client-secret "$($info.clientSecret)" `
            --tenant-id "$($info.tenantId)"
        shell: pwsh

      - name: 🚀Provision Infrastructure
        run: azd provision -e "$Env:AZURE_ENV_NAME" --no-prompt --debug
        env:
          AZD_INITIAL_ENVIRONMENT_CONFIG: ${{ secrets.AZD_INITIAL_ENVIRONMENT_CONFIG }}
        shell: pwsh
        
      - name: 🧪Run Tests
        run: dotnet test --verbosity normal

      - name: 🚀Deploy Application
        run: azd deploy --no-prompt
      
      # comment/remove these lines if you want to keep the environment running
      - name: 🧹Clean up
        run: azd down --force