From 41d7575a4fa7de31ffd52136fc35c1e3bc560d48 Mon Sep 17 00:00:00 2001
From: shijie-openai <shijie.rao@openai.com>
Date: Wed, 3 Jun 2026 09:48:47 -0700
Subject: [PATCH] Rename Azure artifact signing secrets

---
 .github/workflows/rust-release-windows.yml | 36 +++++++++++-----------
 1 file changed, 18 insertions(+), 18 deletions(-)

diff --git a/.github/workflows/rust-release-windows.yml b/.github/workflows/rust-release-windows.yml
index 3a0ba503d0..50c635faee 100644
--- a/.github/workflows/rust-release-windows.yml
+++ b/.github/workflows/rust-release-windows.yml
@@ -21,12 +21,12 @@ jobs:
     permissions:
       contents: read
     env:
-      AZURE_TRUSTED_SIGNING_CLIENT_ID_UPDATED: ${{ secrets.AZURE_TRUSTED_SIGNING_CLIENT_ID_UPDATED }}
-      AZURE_TRUSTED_SIGNING_TENANT_ID_UPDATED: ${{ secrets.AZURE_TRUSTED_SIGNING_TENANT_ID_UPDATED }}
-      AZURE_TRUSTED_SIGNING_SUBSCRIPTION_ID_UPDATED: ${{ secrets.AZURE_TRUSTED_SIGNING_SUBSCRIPTION_ID_UPDATED }}
-      AZURE_TRUSTED_SIGNING_ENDPOINT_UPDATED: ${{ secrets.AZURE_TRUSTED_SIGNING_ENDPOINT_UPDATED }}
-      AZURE_TRUSTED_SIGNING_ACCOUNT_NAME_UPDATED: ${{ secrets.AZURE_TRUSTED_SIGNING_ACCOUNT_NAME_UPDATED }}
-      AZURE_TRUSTED_SIGNING_CERTIFICATE_PROFILE_NAME_UPDATED: ${{ secrets.AZURE_TRUSTED_SIGNING_CERTIFICATE_PROFILE_NAME_UPDATED }}
+      AZURE_ARTIFACT_SIGNING_CLIENT_ID: ${{ secrets.AZURE_ARTIFACT_SIGNING_CLIENT_ID }}
+      AZURE_ARTIFACT_SIGNING_TENANT_ID: ${{ secrets.AZURE_ARTIFACT_SIGNING_TENANT_ID }}
+      AZURE_ARTIFACT_SIGNING_SUBSCRIPTION_ID: ${{ secrets.AZURE_ARTIFACT_SIGNING_SUBSCRIPTION_ID }}
+      AZURE_ARTIFACT_SIGNING_ENDPOINT: ${{ secrets.AZURE_ARTIFACT_SIGNING_ENDPOINT }}
+      AZURE_ARTIFACT_SIGNING_ACCOUNT_NAME: ${{ secrets.AZURE_ARTIFACT_SIGNING_ACCOUNT_NAME }}
+      AZURE_ARTIFACT_SIGNING_CERTIFICATE_PROFILE_NAME: ${{ secrets.AZURE_ARTIFACT_SIGNING_CERTIFICATE_PROFILE_NAME }}
     steps:
       - name: Validate required Azure signing secrets are available
         shell: bash
@@ -34,12 +34,12 @@ jobs:
           set -euo pipefail
 
           required=(
-            AZURE_TRUSTED_SIGNING_CLIENT_ID_UPDATED
-            AZURE_TRUSTED_SIGNING_TENANT_ID_UPDATED
-            AZURE_TRUSTED_SIGNING_SUBSCRIPTION_ID_UPDATED
-            AZURE_TRUSTED_SIGNING_ENDPOINT_UPDATED
-            AZURE_TRUSTED_SIGNING_ACCOUNT_NAME_UPDATED
-            AZURE_TRUSTED_SIGNING_CERTIFICATE_PROFILE_NAME_UPDATED
+            AZURE_ARTIFACT_SIGNING_CLIENT_ID
+            AZURE_ARTIFACT_SIGNING_TENANT_ID
+            AZURE_ARTIFACT_SIGNING_SUBSCRIPTION_ID
+            AZURE_ARTIFACT_SIGNING_ENDPOINT
+            AZURE_ARTIFACT_SIGNING_ACCOUNT_NAME
+            AZURE_ARTIFACT_SIGNING_CERTIFICATE_PROFILE_NAME
           )
 
           missing=()
@@ -247,12 +247,12 @@ jobs:
         with:
           target: ${{ matrix.target }}
           binaries: ${{ env.WINDOWS_BINARIES }}
-          client-id: ${{ secrets.AZURE_TRUSTED_SIGNING_CLIENT_ID_UPDATED }}
-          tenant-id: ${{ secrets.AZURE_TRUSTED_SIGNING_TENANT_ID_UPDATED }}
-          subscription-id: ${{ secrets.AZURE_TRUSTED_SIGNING_SUBSCRIPTION_ID_UPDATED }}
-          endpoint: ${{ secrets.AZURE_TRUSTED_SIGNING_ENDPOINT_UPDATED }}
-          account-name: ${{ secrets.AZURE_TRUSTED_SIGNING_ACCOUNT_NAME_UPDATED }}
-          certificate-profile-name: ${{ secrets.AZURE_TRUSTED_SIGNING_CERTIFICATE_PROFILE_NAME_UPDATED }}
+          client-id: ${{ secrets.AZURE_ARTIFACT_SIGNING_CLIENT_ID }}
+          tenant-id: ${{ secrets.AZURE_ARTIFACT_SIGNING_TENANT_ID }}
+          subscription-id: ${{ secrets.AZURE_ARTIFACT_SIGNING_SUBSCRIPTION_ID }}
+          endpoint: ${{ secrets.AZURE_ARTIFACT_SIGNING_ENDPOINT }}
+          account-name: ${{ secrets.AZURE_ARTIFACT_SIGNING_ACCOUNT_NAME }}
+          certificate-profile-name: ${{ secrets.AZURE_ARTIFACT_SIGNING_CERTIFICATE_PROFILE_NAME }}
 
       - name: Stage artifacts
         shell: bash