fix: codeQL issue fix

.github/workflows/deploy.yml

@@ -2,7 +2,7 @@ name: Validate Deployment v3
 
 on:
   workflow_run:
-    workflows: ["Build Docker and Optional Push"]
+    workflows: ["Build Docker and Optional Push v3"]
     types:
       - completed
     branches:

src/backend/common/config/app_config.py

@@ -112,9 +112,7 @@ def get_azure_credential(self, client_id=None):
             Credential object: Either DefaultAzureCredential or ManagedIdentityCredential.
         """
         if self.APP_ENV == "dev":
-            return (
-                DefaultAzureCredential()
-            )  # CodeQL [SM05139] Okay use of DefaultAzureCredential as it is only used in development
+            return DefaultAzureCredential() # CodeQL [SM05139]: DefaultAzureCredential is safe here
         else:
             return ManagedIdentityCredential(client_id=client_id)
 

src/backend/v3/magentic_agents/reasoning_search.py

@@ -29,7 +29,7 @@ async def initialize(self, kernel: Kernel) -> bool:
             return False
 
         try:
-            credential = SyncDefaultAzureCredential()
+            # credential = SyncDefaultAzureCredential()
 
             self.search_client = SearchClient(endpoint=self.search_config.endpoint, 
                                               credential=AzureKeyCredential(self.search_config.api_key), 

src/backend/v3/orchestration/orchestration_manager.py

@@ -52,7 +52,8 @@ async def init_orchestration(cls, agents: List, user_id: str = None)-> MagenticO
             temperature=0.1
         )
 
-        credential = SyncDefaultAzureCredential()
+        credential = config.get_azure_credential(client_id=config.AZURE_CLIENT_ID)
+        # credential = SyncDefaultAzureCredential()
 
         def get_token():
             token = credential.get_token("https://cognitiveservices.azure.com/.default")