Thanks for taking a look. This repo is meant to stay clean, portable, and safe to share publicly.
- No secrets, no IDs: keep placeholders like
<SUBSCRIPTION_ID>andREPLACE-WITH-SERVICE-CONNECTION. - Keep all code comments in English.
- Prefer small, focused PRs.
- Bicep modules live under
bicep/**/modules. - Parameter files follow
parameters.<region>.json. - Scripts live in
scripts/and should support-WhatIfwhere possible.
Before proposing changes, validate locally:
az bicep build --file ./bicep/part1-platform/main.bicep
az bicep build --file ./bicep/part3-devcenter/main.bicepFor deployments, run What-If first (see docs/DEPLOYMENT.md).
If your change introduces:
- environment-specific names
- real network ranges
- tenant/subscription identifiers
…then it does not belong in this public repo. Put it into a private fork instead.