Hello Team, I’m looking for the recommended way for azure authentication for GitHub action running pulumi , appreciate any input.

Assuming you’re using the Azure Native provider, the authentication methods are listed here. I recommend OIDC because you don’t need to maintain any secrets in GitHub. Once configured in Azure, you only need to set

useOidc

,

clientId

, and

tenantId

.

I second this. OIDC is the way to go. I would suggest creating an Entra ID app with federated credentials towards some environment in github that you use when deploying. Then you can setup your Azure native provider with

useOidc

or the environment variable

ARM_USE_OIDC

Thanks 👍