AI-103: Developing AI Apps and Agents on Azure

By Microsoft · Question Mode

QuestionQ5

VerifiedImplement generative AI and agentic solutions

You have a Microsoft Foundry project that contains an agent. You use a GitHub Actions workflow for CI/CD. You need to configure the workflow to automatically evaluate the agent whenever a pull request (PR) is created, and to prevent branches from merging if the evaluation results do not meet the defined thresholds.

Select
Authentication method:
If the evaluation results are NOT met, configure the workflow to:
Explanation

GitHub Actions workflows should authenticate to Azure using the Azure Login action configured for OpenID Connect (OIDC) federated credentials, which lets the workflow obtain a short-lived Microsoft Entra ID token without storing a personal access token or a managed-identity secret in the repository. This is the recommended secretless authentication pattern for GitHub-hosted runners that need to call Azure resources such as a Foundry project. To gate a pull request on the evaluation outcome, the workflow step that runs the evaluation must be configured to fail (return a non-zero exit code) when the results do not meet the defined thresholds; when the repository's branch protection rules require that check to pass, a failing step blocks the PR from merging. Sending an alert or locking the target branch does not tie the PR status check to the evaluation result, so neither action prevents the merge.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!