add github workflow file

Author: CawaMS

.github/azure-dev.yml

@@ -0,0 +1,63 @@
+on:
+    workflow_dispatch:
+    push:
+      branches:
+        - main
+  
+  permissions:
+    id-token: write
+    contents: read
+    actions: read
+    security-events: write
+  
+  jobs:
+    deploy:
+      runs-on: ubuntu-latest
+      env:
+        AZURE_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
+        AZURE_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
+        AZURE_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}
+        AZURE_ENV_NAME: ${{ vars.AZURE_ENV_NAME }}
+        AZURE_LOCATION: ${{ vars.AZURE_LOCATION }}
+  
+      steps:
+        - name: Checkout
+          uses: actions/checkout@v4
+  
+        - name: Install azd 
+          uses: Azure/setup-azd@v1.0.0
+  
+        #- name: Run Microsoft Security DevOps Analysis
+        #  uses: microsoft/security-devops-action@v1
+        #  id: msdo
+        #  with:
+        #    tools: templateanalyzer
+  
+        #- name: Upload results to Security tab
+        #  uses: github/codeql-action/upload-sarif@v2
+        #  with:
+        #    sarif_file: ${{ steps.msdo.outputs.sarifFile }}
+  
+        - name: Log in with Azure (Federated Credentials)
+          if: ${{ env.AZURE_CLIENT_ID != '' }}
+          run: |
+            azd auth login `
+              --client-id "$Env:AZURE_CLIENT_ID" `
+              --federated-credential-provider "github" `
+              --tenant-id "$Env:AZURE_TENANT_ID"
+          shell: pwsh
+  
+        - name: Provision Infrastructure
+          run:  azd provision --no-prompt
+          env:
+            AZURE_ENV_NAME: ${{ vars.AZURE_ENV_NAME }}
+            AZURE_LOCATION: ${{ vars.AZURE_LOCATION }}
+            AZURE_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}
+            CREATE_ROLE_FOR_USER: false
+  
+        - name: Deploy Application
+          run: azd deploy --no-prompt
+          env:
+            AZURE_ENV_NAME: ${{ vars.AZURE_ENV_NAME }}
+            AZURE_LOCATION: ${{ vars.AZURE_LOCATION }}
+            AZURE_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}