Document Details

Deploy Github Actions Openid Connect
Home / Scan #41 / Deploy Github Actions Openid Connect
Sad Tux - Windows bias detected
This page contains Windows bias

About This Page

This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
GitHub View on GitHub 📚 View on Microsoft Learn

Bias Analysis

Detected Bias Types
windows_first
windows_tools
Summary
The documentation provides platform-specific examples for multiple languages. However, in the ASP.NET section, the only example given runs on Windows ('runs-on: windows-latest') and uses Windows-specific tools such as MSBuild and NuGet, with Windows-style paths (e.g., '.\SampleWebApplication.sln'). There is no equivalent Linux-based example for ASP.NET, while all other language examples (ASP.NET Core, Java, Tomcat, Node.js, Python) use 'ubuntu-latest' and cross-platform tooling. This creates a Windows-first and Windows-tools bias for ASP.NET workloads.
Recommendations
  • Add a Linux-based (e.g., 'runs-on: ubuntu-latest') example for ASP.NET, using cross-platform tools such as 'dotnet build' instead of MSBuild, and ensure paths use POSIX style.
  • If MSBuild is required, clarify if and how it can be used on Linux (e.g., via Mono or .NET SDK), or provide guidance for cross-platform builds.
  • For NuGet, show how to restore packages using the 'dotnet' CLI, which is cross-platform, instead of the Windows-only 'nuget' tool.
  • Explicitly mention platform compatibility and provide parity in examples for both Windows and Linux where possible, especially for .NET workloads.
GitHub Create Pull Request

Scan History

Date Scan Status Result
2025-07-12 23:44 #41 cancelled Biased Biased
2025-07-12 00:58 #8 cancelled Clean Clean
2025-07-10 05:06 #7 processing Clean Clean
2025-07-09 23:22 #6 cancelled Clean Clean

Flagged Code Snippets

name: Deploy ASP.NET MVC App deploy to Azure Web App

on: [push]

permissions:
      id-token: write
      contents: read

env:
  AZURE_WEBAPP_NAME: my-app    # Set this to your application's name
  AZURE_WEBAPP_PACKAGE_PATH: '.'      # Set this to the path to your web app project, defaults to the repository root
  NUGET_VERSION: '5.3.x'           # Set this to the dot net version to use

jobs:
  build-and-deploy:
    runs-on: windows-latest
    steps:

    # Check out the repo
    - uses: actions/checkout@main
    
    - uses: azure/login@v2
      with:
        client-id: ${{ secrets.AZURE_CLIENT_ID }}
        tenant-id: ${{ secrets.AZURE_TENANT_ID }}
        subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

    - name: Install Nuget
      uses: nuget/setup-nuget@v1
      with:
        nuget-version: ${{ env.NUGET_VERSION}}
    - name: NuGet to restore dependencies as well as project-specific tools that are specified in the project file
      run: nuget restore
  
    - name: Add msbuild to PATH
      uses: microsoft/setup-msbuild@v1.0.2

    - name: Run MSBuild
      run: msbuild .\SampleWebApplication.sln
       
    - name: 'Run Azure webapp deploy action using publish profile credentials'
      uses: azure/webapps-deploy@v3
      with: 
        app-name: ${{ env.AZURE_WEBAPP_NAME }} # Replace with your app name
        package: '${{ env.AZURE_WEBAPP_PACKAGE_PATH }}/SampleWebApplication/'
  
    # Azure logout 
    - name: logout
      run: |
        az logout