[release/stable] Migrate VS insertion from RIT+PAT to roslyn-tools CLI+WIF#13078
Merged
JoeRobich merged 2 commits intorelease/stablefrom Apr 22, 2026
Merged
[release/stable] Migrate VS insertion from RIT+PAT to roslyn-tools CLI+WIF#13078JoeRobich merged 2 commits intorelease/stablefrom
JoeRobich merged 2 commits intorelease/stablefrom
Conversation
Replace the RoslynTools.VisualStudioInsertionTool (RIT) with the roslyn-tools
create-insertion CLI, which supports bearer token auth via DefaultAzureCredential.
The dnceng AzDO connection now uses a WIF service connection ('DncEng Insertion:
Roslyn and Razor') instead of the dn-bot-dnceng-build-e-code-full-release-e-packaging-r PAT.
The DevDiv token (dn-bot-devdiv-build-e-code-full-release-e-packaging-r) is still
passed as a PAT since DevDiv org auth is separate.
Part of dnceng/internal work item 10097.
…eCredential DefaultAzureCredential on build agents may pick up the agent's managed identity rather than the WIF service connection's SP. Explicitly acquire the token via 'az account get-access-token' within the AzureCLI@2 task context, where the correct SP is already logged in via federated token.
JoeRobich
approved these changes
Apr 22, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Backport of #13010 to release/stable
/cc @JoeRobich @missymessa
Customer Impact
Regression
[If yes, specify when the regression was introduced. Provide the PR or commit if known.]
Testing
[How was the fix verified? How was the issue missed previously? What tests were added?]
Risk
[High/Medium/Low. Justify the indication by mentioning how risks were measured and addressed.]