Skip to content

Conversation

@matt-FFFFFF
Copy link
Member

@matt-FFFFFF matt-FFFFFF commented Sep 11, 2025

This pull request introduces new GitHub Copilot integration and automation features for Azure Verified Modules (AVM) repositories, along with improvements for environment setup and validation workflows. The main focus is on enabling Copilot workflows, providing clear instructions for contributors, and ensuring secure and compliant automation across multiple repositories.

Copilot Integration & Environment Setup

  • Added a dedicated Copilot environment to repository management, including creation of environment-specific secrets (ARM_CLIENT_ID, ARM_TENANT_ID, ARM_SUBSCRIPTION_ID) for secure authentication in workflows. [1] [2] [3] [4]

Contributor Guidance & Validation

  • Added a comprehensive copilot-instructions.md file detailing AVM standards, validation requirements, module usage, naming conventions, troubleshooting, and compliance checklists for contributors and Copilot agents.
  • Updated managed file policies to include the new Copilot instructions and setup workflow as required files for AVM compliance.

Container & Automation Enhancements

  • Improved the avm script to detect Copilot agent execution and automatically mount host SSL certificates into containers, ensuring secure API access for Copilot workflows. [1] [2]
  • Added a new workflow, admin-merge-pre-commit-prs.yml, to automate approval and merging of pre-commit PRs across multiple repositories, streamlining maintenance tasks.

Other Improvements

  • Set fail-fast: false in container release and matrix workflows to improve reliability of parallel job execution.

These changes collectively improve the developer experience, automation, and compliance for AVM repositories, especially when using GitHub Copilot and related automation tools.

Testing evidence:

GitHub run on example repo, you can see it creating the copilot environment:

https://github.com/Azure/avm-terraform-governance/actions/runs/17674632892/job/50233801504

@matt-FFFFFF matt-FFFFFF changed the title fix: container release & add workflow to approve chore prs fix: container release, CCA SSL & add workflow to approve chore prs Sep 12, 2025
@azure-verified-modules
Copy link
Contributor

This test run generated changes to the mock modules in this PR. Please review the changes and merge if appropriate, see #279.

@azure-verified-modules
Copy link
Contributor

This test run generated changes to the mock modules in this PR. Please review the changes and merge if appropriate, see #280.

@matt-FFFFFF matt-FFFFFF changed the title fix: container release, CCA SSL & add workflow to approve chore prs feat: CCA, container build fix, mass merge chore PR Sep 12, 2025
@azure-verified-modules
Copy link
Contributor

This test run generated changes to the mock modules in this PR. Please review the changes and merge if appropriate, see #281.

@azure-verified-modules
Copy link
Contributor

This test run generated changes to the mock modules in this PR. Please review the changes and merge if appropriate, see #282.

azure-verified-modules bot and others added 2 commits September 12, 2025 13:23
…rge) (#282)

This PR was created by the AVM governance test workflow after pre-commit
was run. Please review if the changes should be made to the mock
modules:
<https://github.com/Azure/avm-terraform-governance/actions/runs/17674041306>

Co-authored-by: Azure Verified Modules [bot] <1049636+azure-verified-modules[bot]@users.noreply.github.com>
…merge) (#281)

This PR was created by the AVM governance test workflow after pre-commit
was run. Please review if the changes should be made to the mock
modules:
<https://github.com/Azure/avm-terraform-governance/actions/runs/17674041306>

Co-authored-by: Azure Verified Modules [bot] <1049636+azure-verified-modules[bot]@users.noreply.github.com>
@azure-verified-modules
Copy link
Contributor

This test run generated changes to the mock modules in this PR. Please review the changes and merge if appropriate, see #283.

@azure-verified-modules
Copy link
Contributor

This test run generated changes to the mock modules in this PR. Please review the changes and merge if appropriate, see #284.

azure-verified-modules bot and others added 2 commits September 12, 2025 13:41
…rge) (#283)

This PR was created by the AVM governance test workflow after pre-commit
was run. Please review if the changes should be made to the mock
modules:
<https://github.com/Azure/avm-terraform-governance/actions/runs/17674567141>

Co-authored-by: Azure Verified Modules [bot] <1049636+azure-verified-modules[bot]@users.noreply.github.com>
…merge) (#284)

This PR was created by the AVM governance test workflow after pre-commit
was run. Please review if the changes should be made to the mock
modules:
<https://github.com/Azure/avm-terraform-governance/actions/runs/17674567141>

Co-authored-by: Azure Verified Modules [bot] <1049636+azure-verified-modules[bot]@users.noreply.github.com>
Copy link
Contributor

@jtracey93 jtracey93 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Some comments

@matt-FFFFFF matt-FFFFFF merged commit 7ffe0da into main Sep 12, 2025
3 of 4 checks passed
@matt-FFFFFF matt-FFFFFF deleted the matt-FFFFFF/fixes branch September 12, 2025 18:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants