Replace vsce PAT with an Azure Credential

The latest version of the tool will use the Azure API to grab a token, it just needs to be run in a context where Azure CLI is authenticated. I think.
PowerShell · May 3, 2024 · 5869d96 · 5869d96
1 parent 9719cc0
commit 5869d96
Showing 1 changed file with 14 additions and 12 deletions.
diff --git a/.pipelines/vscode-powershell-Official.yml b/.pipelines/vscode-powershell-Official.yml
@@ -190,21 +190,23 @@ extends:
         pool:
           type: windows
         variables:
-          - group: VSCodeMarketplace
-          - name: ob_outputDirectory
-            value: $(Build.SourcesDirectory)/out
+          ob_outputDirectory: $(Build.SourcesDirectory)/out
         steps:
         - download: current
           displayName: Download artifacts
         - pwsh: npm ci
           displayName: Install NPM packages (for vsce)
-        - pwsh: |
-            $publishArgs = @(
-              '--pat'
-              '$(token)'
-              '--packagePath'
-              '$(drop)/powershell-$(vsixVersion).vsix'
-              if ([bool]::Parse('$(prerelease)')) { '--pre-release' }
-            )
-            npm run publish -- @publishArgs
+        - task: AzureCLI@2
           displayName: Run vsce publish
+          inputs:
+            azureSubscription: vscode-marketplace
+            scriptType: pscore
+            scriptLocation: inlineScript
+            inlineScript: |
+              $publishArgs = @(
+                '--azure-credential'
+                '--packagePath'
+                '$(drop)/powershell-$(vsixVersion).vsix'
+                if ([bool]::Parse('$(prerelease)')) { '--pre-release' }
+              )
+              npm run publish -- @publishArgs