Sdaf Gh Bootstrap
Azure/sap-automation-gh-bootstrap/skills/sdaf-gh-bootstrap
codingOfficial
Official Provider SkillView repo
Action-loop skill for bootstrapping the SDAF GitHub Actions surface: create the configuration repo from `Azure/sap-automation-gh-bootstrap`, set the pre-workflow-`00` repository variables (`ARM_ENVIRONMENT`, `AZURE_ENVIRONMENT`, `AZURE_AUDIENCE`), run the SDAF setup utility from `Azure/sap-automation` (which creates the GitHub App, repo vars/secrets, Azure identity, and the first control-plane Environment), then dispatch workflow `00-create-environment.yml` to generate and commit `WORKSPACES/DEP
Files2 files
SKILL.md127 lines
Loading editor…
Install
RecommendedOne command — your agent picks it up automatically.
Select an AI agent above to see the install command.
or
Manual Install
More stepsDownload the archive and add the files to your project manually.
Skill details
Versionv1.0.0
AuthorAzure
Categorycoding
Skill IDAzure/sap-automation-gh-bootstrap/skills/sdaf-gh-bootstrap
Files2 files
Related skills
Sdaf Gh Oidc And AuthAction-loop skill for authenticating the SDAF GitHub Actions workflows to
Azure. Two independent layers must both be right: (1) `azure/login` uses an
OIDC federated credential and reads `AZURE_ENVIRONMENT` +
`AZURE_AUDIENCE`; (2) Terraform and Ansible authenticate separately via
either a managed identity (`USE_MSI=true`, `MSI_ID`) or a service principal
with `ARM_CLIENT_SECRET`, and always read `ARM_ENVIRONMENT`. This skill
resolves `AADSTS7002381` (enterprise-claim tenant policy),
`AADSTS700021Sdaf Gh Workflow SequenceContext-primer for the SDAF GitHub Actions workflow catalogue: the ordered
sequence `00`-`12`, each workflow's `workflow_dispatch` inputs, which
workflows commit generated tfvars to `main` (`00`, `02`, `04`) and which
create GitHub Environments (`00` control-plane, `02` workload-zone —
`04` deliberately does not), which workflows run on `self-hosted` runners
(`01` deploy-control-plane and later, plus `06`, `06.5`, `10`, `12`),
which support genuine plan-only via `test` (per current docs), and thAsim Parser Filter ValidatorValidates ASIM parser filtering parameters by running filter tests against a Log Analytics workspace. Pure PowerShell using az CLI for authentication — no Python or Azure SDK packages required. Use this skill after creating or modifying an ASIM parser to verify that its filtering parameters work correctly.Asim Parser Github Pr PackagerPackages the created and validated ASIM schema parser into a GitHub PR for the Azure-Sentinel repository. Use this skill when asked to package a parser into a GitHub PR.Asim Parser Pr ReviewerReviews pull requests for ASIM parser changes and summarizes suggestions. This is not to be called by asim-parser-creator-orchestrator or when creating ASIM parsers in general. This is strictly for reviewing pull requests after necessary workflows have ran.Run Solution AnalyzerRun the Solutions Analyzer scripts: mapper, documentation generator, ASIM browser. Use when: running solution analyzer, generating CSVs, generating docs, refreshing caches, force-refresh, invalidating caches, generating ASIM browser, running mapper, running collect_table_info, running collect_asim_fields.