azure-github-managed-identity

Provision Azure User Assigned Managed Identities with OIDC federation and RBAC for GitHub Actions.

1|Updated Mar 5, 2026
One-click install
npx skills add https://github.com/PlagueHO/plagueho.os --skill azure-github-managed-identity
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: azure-github-managed-identity
Source: https://github.com/PlagueHO/plagueho.os/tree/main/.github/skills/azure-github-managed-identity
Command: npx skills add https://github.com/PlagueHO/plagueho.os --skill azure-github-managed-identity

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill automates the secure provisioning of Azure User Assigned Managed Identities, enabling passwordless authentication for GitHub Actions and Copilot agents via OIDC federation.

Core Features & Use Cases

  • Automated Identity Provisioning: Creates dedicated Azure Managed Identities for GitHub environments (e.g., test, staging, prod) and the Copilot coding agent.
  • OIDC Federation Setup: Configures federated identity credentials, linking GitHub OIDC tokens to Azure identities for secure, short-lived access.
  • RBAC Role Assignment: Assigns necessary Azure roles (Contributor, conditional User Access Administrator) to grant appropriate permissions while adhering to least privilege principles.
  • Use Case: Streamline your CI/CD pipeline by enabling your GitHub Actions to deploy to Azure without managing secrets, using a managed identity configured by this skill.

Quick Start

Use the azure-github-managed-identity skill to provision Azure access for the 'my-repo' GitHub repository.

Frequently Asked Questions about azure-github-managed-identity

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure passwordless Azure authentication for GitHub Actions?

You can set up passwordless authentication by provisioning Azure User Assigned Managed Identities with OIDC federation and RBAC role assignments, replacing static secrets with short-lived GitHub OIDC tokens.

Do I need PowerShell and Az modules to automate Azure managed identity provisioning?

Yes, automating Azure managed identity provisioning requires PowerShell with specific Az modules and an authenticated Azure session to execute the scripts and configure OIDC federation and RBAC roles.

Can I set up OIDC federation for a GitHub Copilot coding agent in Azure?

Yes, this supports provisioning a dedicated Azure User Assigned Managed Identity specifically for the GitHub Copilot coding agent, configuring OIDC federation for secure, passwordless access.

What's the best way to assign RBAC roles to GitHub Actions without storing secrets?

Assigning RBAC roles like Contributor and conditional User Access Administrator directly to Azure Managed Identities via OIDC federation scripts ensures least privilege access for GitHub Actions without storing secrets.

How does OIDC federation work between GitHub and Azure for CI/CD pipelines?

OIDC federation links GitHub OIDC tokens to Azure User Assigned Managed Identities, granting GitHub Actions short-lived access tokens for CI/CD deployments without managing static secrets.