[App Service] az webapp deploy, az webapp secure-build show, az webapp troubleshoot deployment: Add Secure Build and deployment troubleshooting commands

[Shi1810]

🤖 PR Validation — ⚠️ Review suggested

Breaking Changes	Tests
⚠️ None	️✔️ 130/130

⚠️AzureCLI-BreakingChangeTest

⚠️appservice

rule	cmd_name	rule_message	suggest_message
⚠️ 1006 - ParaAdd	webapp deploy	cmd webapp deploy added parameter show_secure_build
⚠️ 1011 - SubgroupAdd	webapp secure-build	sub group webapp secure-build added
⚠️ 1001 - CmdAdd	webapp troubleshoot deployment	cmd webapp troubleshoot deployment added

Related command
az webapp deploy
az webapp secure-build show
az webapp troubleshoot deployment

Description

Adds Secure Build support for Linux Python web apps and deployment troubleshooting commands.

Adds az webapp secure-build show to show the cached report for the active deployment, including optional --rescan to force fresh dependency analysis.
Adds az webapp deploy --show-secure-build. --show-secure-build is opt-in because analysis can add several minutes. Deployment remains successful even if the report cannot be retrieved.
Adds az webapp troubleshoot deployment.
Includes links to detailed results in Kudu.
Adds help content and mocked test coverage.

Testing Guide
az webapp deploy --resource-group shikhajhatestingrg --name shikhajha-securebuild-euap-2 --src-path ..live-secure-build-vulnerable.zip --type zip --async false --show-secure-build

az webapp secure-build show --resource-group shikhajhatestingrg --name shikhajha-securebuild-euap-2 --output table

az webapp troubleshoot deployment --resource-group shikhajhatestingrg --name shikhajha-securebuild-euap -o json

az webapp troubleshoot deployment --resource-group shikhajhatestingrg --name shikhajha-securebuild-euap -o table

History Notes

[AppService] az webapp deploy: Add --show-secure-build to deploy and display the secure build summary afterward
[AppService] az webapp secure-build show: Add --rescan to force fresh dependency analysis
[AppService] az webapp troubleshoot deployment: Add command to diagnose the latest deployment

---

This checklist is used to make sure that common guidelines for a pull request are followed.

• The PR title and description has followed the guideline in Submitting Pull Requests.

• I adhere to the Command Guidelines.

• I adhere to the Error Handling Guidelines.

[azure-client-tools-bot-prd]

Hi Shi1810,
Since the current milestone time is less than 7 days, this pr will be reviewed in the next milestone.

[microsoft-github-policy-service]

Thank you for your contribution Shi1810! We will review the pull request and get back to you soon.

[Copilot]

Copilot review overview

🔵 Needs a closer look

One or more issues must be addressed before approval.

Review effort: Lite
Findings: None

What changed in this PR

Adds Secure Build reporting and deployment troubleshooting commands for App Service web apps.

Changes:

• Adds secure-build show and troubleshoot deployment.
• Adds --show-secure-build to az webapp deploy.
• Adds help content and mocked unit tests.

File	Description
src/​azure-cli/​azure/​cli/​command_modules/​appservice/​tests/​latest/​test_webapp_commands_thru_mock.py	Updated as part of this pull request.
src/​azure-cli/​azure/​cli/​command_modules/​appservice/​custom.py	Updated as part of this pull request.
src/​azure-cli/​azure/​cli/​command_modules/​appservice/​commands.py	Updated as part of this pull request.
src/​azure-cli/​azure/​cli/​command_modules/​appservice/​_params.py	Updated as part of this pull request.
src/​azure-cli/​azure/​cli/​command_modules/​appservice/​_help.py	Updated as part of this pull request.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Yong Zhang (yonzhan)]

App Service