Sung-Hyun Kang b288ed7374 ci: route Playwright reports through private Azure Storage container ...

Replaces the public `/playwright-reports/*` static-website uploads and all GitHub Actions artifact uploads for Playwright traces/videos/blob-reports with uploads to a new private container `playwright-reports` on the same storage account. PR comments now link to an Azure Portal blob-properties deep link (requires AAD sign-in) instead of the previously anonymous static-site URL.

Fixes MSRC finding: Playwright traces captured on test failure embed Authorization: Bearer headers, and the existing publish path made them anonymously downloadable. The new private container is RBAC-gated (Storage Blob Data Reader/Contributor at container scope) and the storage account already has anonymous blob access and shared-key access disabled.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-06-10 14:16:46 -05:00

..

skills

Copilot instructions and build/test skills (#2444)

2026-04-06 15:51:54 -07:00

workflows

ci: route Playwright reports through private Azure Storage container

2026-06-10 14:16:46 -05:00

CODEOWNERS

Update CODEOWNERS

2020-07-24 15:45:42 -05:00

copilot-instructions.md

Improve delete confirmation dialogs with copyable resource ID and warning (#2464)

2026-04-28 07:48:33 -07:00

dependabot.yml

Create dependabot.yml

2021-03-29 15:09:18 -07:00

PULL_REQUEST_TEMPLATE.md

New preview site (#2036)

2025-01-30 16:14:03 -08:00