From c6ed4f6dba4f8cf239cab3a186200b81378c7d07 Mon Sep 17 00:00:00 2001
From: Missy Messa <47990216+missymessa@users.noreply.github.com>
Date: Wed, 25 Mar 2026 18:12:43 -0700
Subject: [PATCH] Remove dead dn-bot-dnceng-build-rw-code-rw-release-rw vault
 entry (WI 10134)

This PAT is defined in the secret-manager manifest but never consumed
by the dotneteng-status app. settings.json has no [vault(...)] reference
to this secret. The app only uses:
- dn-bot-dnceng-workitems-rw (work item ops, migrated in WI 10113)
- dn-bot-dnceng-build-r-code-r-project-r-profile-r (build monitor, WI 10136)

Removing the dead entry stops unnecessary PAT generation/rotation.
---
 .vault-config/shared/dotneteng-status-secrets.yaml | 10 ----------
 1 file changed, 10 deletions(-)

diff --git a/.vault-config/shared/dotneteng-status-secrets.yaml b/.vault-config/shared/dotneteng-status-secrets.yaml
index 1606aecc2..9364de9db 100644
--- a/.vault-config/shared/dotneteng-status-secrets.yaml
+++ b/.vault-config/shared/dotneteng-status-secrets.yaml
@@ -15,16 +15,6 @@ app-insights-connection-string:
   parameters:
     description: The connection string for application insights. Go to the Azure resource for application insights -> Configure -> Properties -> Get the connection string
 
-dn-bot-dnceng-build-rw-code-rw-release-rw:
-  type: azure-devops-access-token
-  parameters:
-    organizations: dnceng
-    scopes: build_execute code_write release_execute
-    domainAccountName: dn-bot
-    domainAccountSecret:
-      name: dn-bot-account-redmond
-      location: helixkv
-
 dn-bot-dnceng-workitems-rw:
   type: azure-devops-access-token
   parameters: