Skip to content

[release/dev17.14] Migrate VS insertion from RIT+PAT to roslyn-tools CLI+WIF#13082

Merged
JoeRobich merged 2 commits intorelease/dev17.14from
backport/pr-13010-to-release/dev17.14
Apr 22, 2026
Merged

[release/dev17.14] Migrate VS insertion from RIT+PAT to roslyn-tools CLI+WIF#13082
JoeRobich merged 2 commits intorelease/dev17.14from
backport/pr-13010-to-release/dev17.14

Conversation

@github-actions
Copy link
Copy Markdown

Backport of #13010 to release/dev17.14

/cc @JoeRobich @missymessa

Customer Impact

Regression

  • Yes
  • No

[If yes, specify when the regression was introduced. Provide the PR or commit if known.]

Testing

[How was the fix verified? How was the issue missed previously? What tests were added?]

Risk

[High/Medium/Low. Justify the indication by mentioning how risks were measured and addressed.]

Replace the RoslynTools.VisualStudioInsertionTool (RIT) with the roslyn-tools
create-insertion CLI, which supports bearer token auth via DefaultAzureCredential.
The dnceng AzDO connection now uses a WIF service connection ('DncEng Insertion:
Roslyn and Razor') instead of the dn-bot-dnceng-build-e-code-full-release-e-packaging-r PAT.

The DevDiv token (dn-bot-devdiv-build-e-code-full-release-e-packaging-r) is still
passed as a PAT since DevDiv org auth is separate.

Part of dnceng/internal work item 10097.
…eCredential

DefaultAzureCredential on build agents may pick up the agent's managed identity
rather than the WIF service connection's SP. Explicitly acquire the token via
'az account get-access-token' within the AzureCLI@2 task context, where the
correct SP is already logged in via federated token.
@github-actions github-actions Bot requested review from a team as code owners April 22, 2026 14:22
@JoeRobich JoeRobich enabled auto-merge April 22, 2026 14:25
@JoeRobich JoeRobich merged commit b562693 into release/dev17.14 Apr 22, 2026
11 checks passed
@JoeRobich JoeRobich deleted the backport/pr-13010-to-release/dev17.14 branch April 22, 2026 14:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants