main.yml

name: Refresh data

on:
  workflow_dispatch:
  schedule:
    - cron: "0 0 * * *" # daily

jobs:
  main:
    runs-on: ubuntu-latest
    environment: dev
    permissions:
      id-token: write # Graph auth
      contents: write # committing
    steps:
      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
      # azure-identity doesn't support GitHub WIF
      - uses: azure/login@8c334a195cbb38e46038007b304988d888bf676a # v2
        with:
          tenant-id: ${{ vars.AZURE_TENANT_ID }}
          client-id: ${{ vars.AZURE_CLIENT_ID }}
          allow-no-subscriptions: true
      - uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
        with:
          python-version: 3.x
          cache: pip
      - run: pip install -r requirements.txt
      - run: python main.py
      - uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # v9.1.4
        with:
          default_author: github_actions
          message: Intune change detected