Skip to content

Remove support for 8 unused secret-manager types#6646

Draft
garath wants to merge 1 commit into
dotnet:mainfrom
garath:mistucke/secret-type-audit
Draft

Remove support for 8 unused secret-manager types#6646
garath wants to merge 1 commit into
dotnet:mainfrom
garath:mistucke/secret-type-audit

Conversation

@garath

@garath garath commented Jul 22, 2026

Copy link
Copy Markdown
Member

Summary

Removes secret-manager secret types that are not referenced by any .vault-config manifest across the repositories in the dnceng/internal ADO project.

Audit

Searched every .vault-config manifest in: dotnet-arcade, dotnet-arcade-services, dotnet-dnceng, dotnet-helix-machines, dotnet-helix-service, dotnet-release. None of the following types were used by any secret:

  • ad-application
  • maestro-access-token
  • dotnetstatusweb-access-token
  • sql-connection-string
  • kusto-connection-string (depended on ad-application; also unused)
  • base64-encoder
  • azure-storage-account-sas-uri
  • azure-storage-container-sas-token

Changes

  • Deleted the 8 unused SecretType classes. Registration is reflection-based (AddNamedFromAssembly scans [Name] attributes), so deleting the classes fully deregisters them.
  • Deleted the orphaned DotNetStatusWebAccessTokenTests.
  • Removed the corresponding Readme.md documentation sections.

Validation

  • dotnet build succeeds (0 warnings, 0 errors).
  • All 28 unit tests pass.

Removes secret types that are not referenced by any .vault-config manifest
across the dnceng/internal ADO project (audited: dotnet-arcade,
dotnet-arcade-services, dotnet-dnceng, dotnet-helix-machines,
dotnet-helix-service, dotnet-release):

- ad-application
- maestro-access-token
- dotnetstatusweb-access-token
- sql-connection-string
- kusto-connection-string (depended on ad-application; also unused)
- base64-encoder
- azure-storage-account-sas-uri
- azure-storage-container-sas-token

Registration is reflection-based (AddNamedFromAssembly scans [Name]
attributes), so deleting the type classes fully deregisters them. Also
removes the orphaned DotNetStatusWebAccessTokenTests and the corresponding
Readme documentation sections.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: f4dd4f39-9896-49e1-a690-c9930af65ebd
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant