QuestionQ67

VerifiedSecure, optimize, and deploy database solutions

The repository contains the AZURE_SQL_CONNECTION_STRING secret.

The target is an Azure SQL database that permits access to Azure services and supports mixed authentication.

The workflow completes successfully.

For each statement, select Yes if it is true; otherwise, select No.

Question Image

Yes or No
StatementsYesNo
The workflow relies on a Microsoft Entra workload identity to access the target Azure SQL database.
Changing the Build SQL project step to run: dotnet build MyDatabaseProject.sqlproj -c Release will result in a successful deployment.
The workflow can be triggered manually, without making changes to the repository.
Explanation

The SQL publish action receives a connection string from a repository secret, so it uses that connection string’s authentication rather than a workload identity. id-token: write only allows the workflow to request an OIDC token; it does not authenticate the publish action to Azure SQL. A default SQL project build creates the DACPAC in bin/Debug, but a Release build places it under bin/Release; the unchanged publish path still points to the Debug artifact. workflow_dispatch enables manual workflow runs.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!