[PR #5347] [MERGED] [BRE-831] migrate secrets akv #5689

Closed
opened 2025-11-27 00:12:35 -06:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/bitwarden/android/pull/5347
Author: @pixman20
Created: 6/11/2025
Status: Merged
Merged: 7/15/2025
Merged by: @vvolkgang

Base: mainHead: BRE-831-migrate-secrets-akv


📝 Commits (10+)

📊 Changes

7 files changed (+194 additions, -46 deletions)

View changed files

📝 .github/workflows/build-authenticator.yml (+19 -6)
📝 .github/workflows/build.yml (+48 -23)
📝 .github/workflows/crowdin-pull.yml (+18 -5)
📝 .github/workflows/crowdin-push.yml (+8 -2)
📝 .github/workflows/github-release.yml (+20 -2)
📝 .github/workflows/scan-ci.yml (+41 -4)
📝 .github/workflows/scan.yml (+40 -4)

📄 Description

🎟️ Tracking

BRE-831

📔 Objective

Updating to use Azure Key Vault Secrets in place of GitHub secrets.
All GitHub secrets have been migrated to the repository's respective Key Vault.
Azure Service Principals have been updated to use Managed Identities with OIDC.

📸 Screenshots

Reminders before review

  • Contributor guidelines followed
  • All formatters and local linters executed and passed
  • Written new unit and / or integration tests where applicable
  • Protected functional changes with optionality (feature flags)
  • Used internationalization (i18n) for all UI strings
  • CI builds passed
  • Communicated to DevOps any deployment requirements
  • Updated any necessary documentation (Confluence, contributing docs) or informed the documentation team

🦮 Reviewer guidelines

  • 👍 (:+1:) or similar for great changes
  • 📝 (:memo:) or ℹ️ (:information_source:) for notes or general info
  • (:question:) for questions
  • 🤔 (:thinking:) or 💭 (:thought_balloon:) for more open inquiry that's not quite a confirmed issue and could potentially benefit from discussion
  • 🎨 (:art:) for suggestions / improvements
  • (:x:) or ⚠️ (:warning:) for more significant problems or concerns needing attention
  • 🌱 (:seedling:) or ♻️ (:recycle:) for future improvements or indications of technical debt
  • ⛏ (:pick:) for minor or nitpick changes

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/bitwarden/android/pull/5347 **Author:** [@pixman20](https://github.com/pixman20) **Created:** 6/11/2025 **Status:** ✅ Merged **Merged:** 7/15/2025 **Merged by:** [@vvolkgang](https://github.com/vvolkgang) **Base:** `main` ← **Head:** `BRE-831-migrate-secrets-akv` --- ### 📝 Commits (10+) - [`65714ac`](https://github.com/bitwarden/android/commit/65714acd76ff4f0ed1a7f00459d93b96a1be394f) [BRE-831] Migrating secrets to AKV - [`ae14ca0`](https://github.com/bitwarden/android/commit/ae14ca01c523f616f5d20f3da2d35598edbe2229) [BRE-831] Migrating secrets to AKV - [`5e265c3`](https://github.com/bitwarden/android/commit/5e265c387c2e37ef27d5ce10bcb435458c6296e5) [BRE-831] Migrating secrets to AKV - [`0b1483b`](https://github.com/bitwarden/android/commit/0b1483b43e8311b657cce9bdf10efd094f83bccc) [BRE-831] Adding azure logout - [`b35cbce`](https://github.com/bitwarden/android/commit/b35cbce07765d10909ad91dd8dcc04321b8682f3) [BRE-831] Handling ghapp - [`ac87451`](https://github.com/bitwarden/android/commit/ac874510647bb4b72bd3507cb78b18c20b5237a4) [BRE-831] Adding logout - [`d1be769`](https://github.com/bitwarden/android/commit/d1be769c097b5c063cdb572e772b7fdb7766b173) [BRE-831] Updating secrets for AKV using dashes - [`ef47b8d`](https://github.com/bitwarden/android/commit/ef47b8dd6dd82173b7ad1bee465b175317a058c9) [BRE-831] Updating secrets for AKV - [`b618a86`](https://github.com/bitwarden/android/commit/b618a86a28afa3e7bcfe7e51e330d30e45920b14) [BRE-831] Using AKV secrets instead - [`d582cdb`](https://github.com/bitwarden/android/commit/d582cdbd41c793bcfb5562ea1db5b32af13598af) Merge remote-tracking branch 'origin/main' into BRE-831-migrate-secrets-akv ### 📊 Changes **7 files changed** (+194 additions, -46 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/build-authenticator.yml` (+19 -6) 📝 `.github/workflows/build.yml` (+48 -23) 📝 `.github/workflows/crowdin-pull.yml` (+18 -5) 📝 `.github/workflows/crowdin-push.yml` (+8 -2) 📝 `.github/workflows/github-release.yml` (+20 -2) 📝 `.github/workflows/scan-ci.yml` (+41 -4) 📝 `.github/workflows/scan.yml` (+40 -4) </details> ### 📄 Description ## 🎟️ Tracking [BRE-831](https://bitwarden.atlassian.net/browse/BRE-831) ## 📔 Objective Updating to use Azure Key Vault Secrets in place of GitHub secrets. All GitHub secrets have been migrated to the repository's respective Key Vault. Azure Service Principals have been updated to use Managed Identities with OIDC. ## 📸 Screenshots <!-- Required for any UI changes; delete if not applicable. Use fixed width images for better display. --> ## ⏰ Reminders before review - Contributor guidelines followed - All formatters and local linters executed and passed - Written new unit and / or integration tests where applicable - Protected functional changes with optionality (feature flags) - Used internationalization (i18n) for all UI strings - CI builds passed - Communicated to DevOps any deployment requirements - Updated any necessary documentation (Confluence, contributing docs) or informed the documentation team ## 🦮 Reviewer guidelines <!-- Suggested interactions but feel free to use (or not) as you desire! --> - 👍 (`:+1:`) or similar for great changes - 📝 (`:memo:`) or ℹ️ (`:information_source:`) for notes or general info - ❓ (`:question:`) for questions - 🤔 (`:thinking:`) or 💭 (`:thought_balloon:`) for more open inquiry that's not quite a confirmed issue and could potentially benefit from discussion - 🎨 (`:art:`) for suggestions / improvements - ❌ (`:x:`) or ⚠️ (`:warning:`) for more significant problems or concerns needing attention - 🌱 (`:seedling:`) or ♻️ (`:recycle:`) for future improvements or indications of technical debt - ⛏ (`:pick:`) for minor or nitpick changes [BRE-831]: https://bitwarden.atlassian.net/browse/BRE-831?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2025-11-27 00:12:35 -06:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/android#5689