Expired Azure Credentials in GitHub Actions

If your GitHub Actions workflow suddenly starts failing with an error like:

AADSTS7000222: The provided client secret keys are expired

it usually means your Azure service principal secret has expired and needs to be rotated.

Here is a quick guide to updating your Azure credentials and getting your pipeline working again.

The Azure credentials format

In many GitHub workflows, Azure authentication is stored as a JSON secret (often called AZURE_CREDENTIALS):

{
  "clientId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
  "clientSecret": "your-secret-value",
  "subscriptionId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
  "tenantId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
}

Each field maps directly to values in Azure. Where do you find these?

Client ID is the same as Application ID
Client secret is the value of the secret you create
Subscription ID: Azure portal → Subscriptions → select your subscription
Tenant ID is the same as Directory ID

Expired Azure Credentials in GitHub Actions

Comments