Remove azsdk pat usage

eng/pipelines/aggregate-reports.yml

@@ -87,10 +87,7 @@ stages:
             displayName: 'Prep Environment'
 
           - template: /eng/common/pipelines/templates/steps/login-to-github.yml
-            parameters:
-              TokenOwners:
-                - azure
-
+
           - task: PythonScript@0
             condition: succeededOrFailed()
             env:

eng/pipelines/conda-update-pipeline.yml

@@ -125,3 +125,4 @@ extends:
                       - [ ] After upload, delete the dummy libraries and make the new packages publicly available in Conda.
                       - [ ] Create an AKA link for new release logs here: http://aka.ms/
                     BaseBranchName: main
+                    AuthToken: ''

eng/pipelines/docindex.yml

@@ -116,6 +116,7 @@ jobs:
             TargetRepoName: $(DocRepoName)
             TargetRepoOwner: $(DocRepoOwner)
             WorkingDirectory: $(DocRepoLocation)
+            AuthToken: ''
 
         - task: AzureCLI@2
           displayName: Queue Docs CI build for main
@@ -200,7 +201,8 @@ jobs:
             WorkingDirectory: $(DocRepoLocation)
             ScriptDirectory: $(Build.SourcesDirectory)/eng/common/scripts
             PushArgs: -f
-
+            AuthToken: ''
+
         - task: AzureCLI@2
           displayName: Queue Docs CI build for daily branch
           inputs:

eng/pipelines/templates/jobs/ci.tests.yml

@@ -86,10 +86,29 @@ jobs:
           Write-Host "##vso[task.setvariable variable=DOTNET_ROOT]$dotnetroot"
         displayName: 'Set DOTNET_ROOT'
 
+    - ${{ if endsWith(variables['Build.Repository.Name'], '-pr') }}:
+      - checkout: self
+        displayName: 'Sparse checkout eng/common/scripts for GitHub login'
+        path: s/_login_scripts
+        sparseCheckoutDirectories: eng/common/scripts
+        fetchDepth: 1
+
+      - pwsh: |
+          $source = "$(Build.SourcesDirectory)/_login_scripts/eng"
+          $dest = "$(Agent.TempDirectory)"
+          Copy-Item -Recurse -Force $source $dest
+          Remove-Item -Recurse -Force "$(Build.SourcesDirectory)/*" -ErrorAction SilentlyContinue
+          Remove-Item -Recurse -Force "$(Build.SourcesDirectory)/.git" -ErrorAction SilentlyContinue
+        displayName: Copy and clean repo checkout folder
+
+      - template: /eng/common/pipelines/templates/steps/login-to-github.yml
+        parameters:
+          ScriptDirectory: "$(Agent.TempDirectory)/eng/common/scripts"
+
     - template: /eng/common/pipelines/templates/steps/sparse-checkout.yml
       parameters:
         ${{ if endsWith(variables['Build.Repository.Name'], '-pr') }}:
-          TokenToUseForAuth: $(azuresdk-github-pat)
+          TokenToUseForAuth: $(GH_TOKEN)
         Paths:
           - '**'
 

eng/pipelines/templates/jobs/live.tests.yml

@@ -107,10 +107,29 @@ jobs:
       container: $[ variables['Container'] ]
 
     steps:
+      - ${{ if endsWith(variables['Build.Repository.Name'], '-pr') }}:
+        - checkout: self
+          displayName: 'Sparse checkout eng/common/scripts for GitHub login'
+          path: s/_login_scripts
+          sparseCheckoutDirectories: eng/common/scripts
+          fetchDepth: 1
+
+        - pwsh: |
+            $source = "$(Build.SourcesDirectory)/_login_scripts/eng"
+            $dest = "$(Agent.TempDirectory)"
+            Copy-Item -Recurse -Force $source $dest
+            Remove-Item -Recurse -Force "$(Build.SourcesDirectory)/*" -ErrorAction SilentlyContinue
+            Remove-Item -Recurse -Force "$(Build.SourcesDirectory)/.git" -ErrorAction SilentlyContinue
+          displayName: Copy and clean repo checkout folder
+
+        - template: /eng/common/pipelines/templates/steps/login-to-github.yml
+          parameters:
+            ScriptDirectory: "$(Agent.TempDirectory)/eng/common/scripts"
+
       - template: /eng/common/pipelines/templates/steps/sparse-checkout.yml
         parameters:
           ${{ if endsWith(variables['Build.Repository.Name'], '-pr') }}:
-            TokenToUseForAuth: $(azuresdk-github-pat)
+            TokenToUseForAuth: $(GH_TOKEN)
           Paths:
             - '**'
 

eng/pipelines/templates/stages/archetype-python-release.yml

@@ -96,6 +96,7 @@ stages:
                   ReleaseSha: $(Build.SourceVersion)
                   RepoId: Azure/azure-sdk-for-python
                   WorkingDirectory: $(System.DefaultWorkingDirectory)
+                  AuthToken: ''
 
           - ${{if ne(artifact.skipPublishPackage, 'true')}}:
             - deployment: PublishPackage
@@ -352,7 +353,8 @@ stages:
                   CommitMsg: "Increment package version after release of ${{ artifact.name }}"
                   PRTitle: "Increment version for ${{ parameters.ServiceDirectory }} releases"
                   CloseAfterOpenForTesting: '${{ parameters.TestPipeline }}'
-
+                  AuthToken: ''
+
           - ${{if and(eq(variables['Build.Reason'], 'Manual'), eq(variables['System.TeamProject'], 'internal'))}}:
             - template: /eng/pipelines/templates/jobs/smoke.tests.yml
               parameters:

eng/pipelines/templates/stages/python-analyze-weekly.yml

@@ -32,6 +32,9 @@ stages:
           - script: |
               python -m pip install -r eng/ci_tools.txt
             displayName: 'Prep Environment'
+
+          - template: /eng/common/pipelines/templates/steps/login-to-github.yml
+
           - task: PythonScript@0
             displayName: 'Run Pylint Next'
             continueOnError: true
@@ -44,7 +47,7 @@ stages:
                 --disablecov
                 --filter-type="Omit_management"
             env:
-              GH_TOKEN: $(azuresdk-github-pat)
+              GH_TOKEN: $(GH_TOKEN)
 
           - task: PythonScript@0
             displayName: 'Run MyPy Next'
@@ -57,7 +60,7 @@ stages:
                 --checks="next-mypy"
                 --disablecov
             env:
-              GH_TOKEN: $(azuresdk-github-pat)
+              GH_TOKEN: $(GH_TOKEN)
 
           - task: PythonScript@0
             displayName: 'Run Pyright Next'
@@ -70,7 +73,7 @@ stages:
                 --checks="next-pyright"
                 --disablecov
             env:
-              GH_TOKEN: $(azuresdk-github-pat)
+              GH_TOKEN: $(GH_TOKEN)
 
           - script: |
               python -m pip install PyGithub>=1.59.0
@@ -86,7 +89,7 @@ stages:
                 --service="${{ parameters.ServiceDirectory }}"
                 --disablecov
             env:
-              GH_TOKEN: $(azuresdk-github-pat)
+              GH_TOKEN: $(GH_TOKEN)
               SYSTEM_ACCESSTOKEN: $(System.AccessToken)
 
           - task: UsePythonVersion@0
@@ -108,4 +111,4 @@ stages:
                 --service="${{ parameters.ServiceDirectory }}"
                 --checks="next-sphinx"
             env:
-              GH_TOKEN: $(azuresdk-github-pat)
+              GH_TOKEN: $(GH_TOKEN)

eng/pipelines/templates/steps/build-package-artifacts.yml

@@ -25,10 +25,29 @@ parameters:
     default: []
 
 steps:
+  - ${{ if endsWith(variables['Build.Repository.Name'], '-pr') }}:
+    - checkout: self
+      displayName: 'Sparse checkout eng/common/scripts for GitHub login'
+      path: s/_login_scripts
+      sparseCheckoutDirectories: eng/common/scripts
+      fetchDepth: 1
+
+    - pwsh: |
+        $source = "$(Build.SourcesDirectory)/_login_scripts/eng"
+        $dest = "$(Agent.TempDirectory)"
+        Copy-Item -Recurse -Force $source $dest
+        Remove-Item -Recurse -Force "$(Build.SourcesDirectory)/*" -ErrorAction SilentlyContinue
+        Remove-Item -Recurse -Force "$(Build.SourcesDirectory)/.git" -ErrorAction SilentlyContinue
+      displayName: Copy and clean repo checkout folder
+
+    - template: /eng/common/pipelines/templates/steps/login-to-github.yml
+      parameters:
+        ScriptDirectory: "$(Agent.TempDirectory)/eng/common/scripts"
+
   - template: /eng/common/pipelines/templates/steps/sparse-checkout.yml
     parameters:
       ${{ if endsWith(variables['Build.Repository.Name'], '-pr') }}:
-        TokenToUseForAuth: $(azuresdk-github-pat)
+        TokenToUseForAuth: $(GH_TOKEN)
       Paths:
         - '**'
 

eng/pipelines/templates/steps/verify-autorest.yml

@@ -47,3 +47,4 @@ steps:
           CommitMsg: "Regenerated code from nightly builds"
           PRTitle: "Automated autorest generation"
           PRBranchName: 'autorest-${{ parameters.ServiceDirectory }}'
+          AuthToken: ''

eng/pipelines/tsp-spec-sync.yml

@@ -55,4 +55,5 @@ extends:
 
                     Generated from workflow triggered by PR #$(System.PullRequest.PullRequestNumber).
                   CommitMsg: 'Auto-update TSP client generated code'
+                  AuthToken: ''