provision-github-azure-federated-identity

What problem does it solve?

This Skill provisions a single Azure User Assigned Managed Identity (UAMI) with OpenID Connect federation and RBAC bindings to GitHub, enabling passwordless authentication for GitHub Actions or Copilot without long-lived credentials.

Core Features & Use Cases

• Create or verify a GitHub integration resource group and a User Assigned Managed Identity (UAMI) for GitHub OIDC.
• Configure a Federated Identity Credential binding the UAMI to the GitHub repository and environment.
• Assign idempotent RBAC roles at subscription scope (default: Contributor + User Access Administrator) with a least-privilege condition, plus options to customize roles and remove unlisted ones.
• Supports both GitHub Actions environments and the Copilot coding agent; outputs credentials for GitHub secrets.

Quick Start

Run the PowerShell script with the required parameters to provision a GitHub identity for your repository.