AZURE DEPLOYMENT CHECKS / Microsoft
Azure validate
Pins Microsoft's pre-deploy Azure check, which stops without an approved plan and will not run azd deploy itself.
“Pre-deployment validation for Azure readiness. Run deep checks on configuration, infrastructure (Bicep or Terraform), RBAC role assignments, managed identity permissions, and prerequisites before deploying. WHEN: validate my app, check deployment readiness, run preflight checks, verify configuration, check if ready to deploy, validate azure.yaml, validate Bicep, test before deploying, troubleshoot deployment errors, validate Azure Functions, validate function app, validate serverless deployment, verify RBAC roles, check role assignments, review managed identity permissions, what-if analysis, validate Container Apps deployment.”
01 / THE REASONING
Why this made the selection.
- The catalogue does not already have this gate between azure-prepare and azure-deploy.
- The file stops when the approved plan is missing, forbids a deploy while checks fail, and will not call azd up or azd deploy itself.
02 / THE REVIEW RECORD
What we actually inspected.
Source review has boundaries.
A clear record is more useful than a “safe” badge.
Material inspected
- .github/plugins/azure-skills/skills/azure-validate/SKILL.md
- README.md
- LICENSE
- .github/plugins/azure-skills/README.md
- .github/plugins/azure-skills/LICENSE
Our findings
- The skill stops and sends the reader to azure-prepare when .azure/deployment-plan.md is missing or not yet Approved.
- Every check must pass before a deploy, and destructive actions need ask_user.
- Status may be set to Validated only after the workflow script is followed to completion.
- An explicit deploy request is handed to azure-deploy. The skill forbids calling azd up or azd deploy directly, and a validate-only request stops without that handoff.
Not established by this review
- The resource was not executed and its tools were not called.
- workflow.ps1 and workflow.sh were not run.
- No deployment plan was created and azd was not run.
- Neither install command was run.
- Not executed: it was not installed or run.
The review applies to the material and revision named here. A newer upstream release can change its behavior.
03 / PUT IT TO WORK
Add a skill to your workflow.
DOCUMENTED COMMAND
/plugin install azure@skillsCopying does not execute this command. It may retrieve a newer version than the reviewed source.
- The repository README's Plugins section shows /plugin marketplace add microsoft/skills and then /plugin install azure@skills inside Copilot CLI.
- That command installs the azure plugin group. This file is one skill under .github/plugins/azure-skills/skills/azure-validate/.
- The same README's quick start, npx skills add microsoft/skills, asks the operator to select skills and can install more than this file.
- The plugin README prints a different marketplace, microsoft/azure-skills, and /plugin install azure@azure-skills. This record does not use that line.
Before you start
- Copilot CLI if the plugin command is used
- bash on macOS or Linux, or PowerShell on Windows, if the workflow script is followed, which this review did not run
- An approved azure-prepare plan if validation is continued, which this review did not create
- Node.js 22 or later and npm/network access if using the plugin’s Azure MCP server.
04 / FOLLOW THE EVIDENCE
The source trail.
Our notes are separate from the original resource.
Check upstream before adopting a new version.
- azure-validate SKILL.md ↗Checked
https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/skills/azure-validate/SKILL.md
Supports: stop without an approved plan, no deploy on failure, and no direct azd deploy
- Repository README ↗Checked
https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/README.md
Supports: azure plugin install line and MIT statement
- Repository LICENSE ↗Checked
https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/LICENSE
Supports: MIT License
- azure-skills plugin README ↗Checked
https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/README.md
Supports: different plugin install line, npx warning, and telemetry opt-out
https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/LICENSE
Supports: MIT License, same family as the repository root
https://raw.githubusercontent.com/microsoft/skills/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/skills/azure-validate/SKILL.md
Supports: upstreamDescription, limitations, review.reviewedAt, review.notTested