1

Author: ing-alruiz

.github/workflows/azure-webapps-node.yml

@@ -6,21 +6,28 @@ on:
       - main
   workflow_dispatch:
 
+# Add explicit permissions for Azure OIDC
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    
     steps:
       - uses: actions/checkout@v4
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '20.x'  # Upgrade to Node 20 to support all dependencies
+          node-version: '20.x'
           cache: 'npm'
 
       - name: Clean install dependencies
         run: |
-          # Clean npm cache and remove lock file to fix rollup issue
           npm cache clean --force
           rm -f package-lock.json
           rm -rf node_modules
@@ -66,18 +73,26 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     needs: build
+    permissions:
+      id-token: write
+      contents: read
+    
     steps:
-      - uses: actions/download-artifact@v4
+      - name: Download artifact
+        uses: actions/download-artifact@v4
         with:
           name: webapp
 
-      - uses: azure/login@v2
+      - name: Login to Azure
+        uses: azure/login@v2
         with:
           client-id: ${{ secrets.AZUREAPPSERVICE_CLIENTID_646B290AC1724693B164CD3D4947B353 }}
           tenant-id: ${{ secrets.AZUREAPPSERVICE_TENANTID_BD250A8452F0421B94ECF3BD50BFDC47 }}
           subscription-id: ${{ secrets.AZUREAPPSERVICE_SUBSCRIPTIONID_A0A3E69559D143F8A11E4E6CD7432251 }}
 
-      - uses: azure/webapps-deploy@v3
+      - name: Deploy to Azure Web App
+        uses: azure/webapps-deploy@v3
         with:
           app-name: 'albertoruiz'
+          slot-name: 'Production'
           package: .