williamlimasilva/update-avm-modules-in-bicep
skills/update-avm-modules-in-bicep/SKILL.md
Update Azure Verified Modules (AVM) to latest versions in Bicep files.
testing
Updated May 6, 2026
$ install --global
skillsauthnpx skillsauth add williamlimasilva/.copilot update-avm-modules-in-bicepInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Error
VirusTotalMulti-engine malware detection
70%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Mar 18, 2026, 6:45 PM92.4s1 file scanned
SKILL.md
- name:
- update-avm-modules-in-bicep
- description:
- Update Azure Verified Modules (AVM) to latest versions in Bicep files.
Update Azure Verified Modules in Bicep Files
Update Bicep file ${file} to use latest Azure Verified Module (AVM) versions. Limit progress updates to non-breaking changes. Don't output information other than the final output table and summary.
Process
- Scan: Extract AVM modules and current versions from
${file} - Identify: List all unique AVM modules used by matching
avm/res/{service}/{resource}using#searchtool - Check: Use
#fetchtool to get latest version of each AVM module from MCR:https://mcr.microsoft.com/v2/bicep/avm/res/{service}/{resource}/tags/list - Compare: Parse semantic versions to identify AVM modules needing update
- Review: For breaking changes, use
#fetchtool to get docs from:https://github.com/Azure/bicep-registry-modules/tree/main/avm/res/{service}/{resource} - Update: Apply version updates and parameter changes using
#editFilestool - Validate: Run
bicep lintandbicep buildusing#runCommandstool to ensure compliance. - Output: Summarize changes in a table format with summary of updates below.
Tool Usage
Always use tools #search, #searchResults,#fetch, #editFiles, #runCommands, #todos if available. Avoid writing code to perform tasks.
Breaking Change Policy
⚠️ PAUSE for approval if updates involve:
- Incompatible parameter changes
- Security/compliance modifications
- Behavioral changes
Output Format
Only display results in table with icons:
| Module | Current | Latest | Status | Action | Docs |
|--------|---------|--------|--------|--------|------|
| avm/res/compute/vm | 0.1.0 | 0.2.0 | 🔄 | Updated | [📖](link) |
| avm/res/storage/account | 0.3.0 | 0.3.0 | ✅ | Current | [📖](link) |
### Summary of Updates
Describe updates made, any manual reviews needed or issues encountered.
Icons
- 🔄 Updated
- ✅ Current
- ⚠️ Manual review required
- ❌ Failed
- 📖 Documentation
Requirements
- Use MCR tags API only for version discovery
- Parse JSON tags array and sort by semantic versioning
- Maintain Bicep file validity and linting compliance
Related Skills
williamlimasilva/workshop-create
tools
VerifiedTrustedCommunity
Create a new workshop or use an existing directory as one. Handles two paths: (A) use an existing local directory the operator points at, or (B) create a new private GitHub repo in the signed-in account. Never creates a repo inside another repo.
SKILL.mdUpdated Jul 22, 2026
williamlimasilva/vcpkg
development
VerifiedTrustedCommunity
Guide for setting up vcpkg in C++ projects, managing dependency versions, and cross-compiling. Covers manifest initialization, CMake and Visual Studio integration, classic-to-manifest migration, version pinning, baselines, overrides, triplets, and cross-compilation. Use when a user is working with vcpkg project setup, installation, version management, or cross-platform builds. For specialized tasks, additional references cover custom registries and overlay ports (references/registries.md), CI/CD and binary caching (references/ci.md), and troubleshooting and dependency lifecycle (references/troubleshooting.md).
SKILL.mdUpdated Jul 22, 2026
williamlimasilva/signal-write
testing
VerifiedTrustedCommunity
Emit structured agent signals — hands-up, blocked, done, checkpoint, partnership. Signals are written as JSON to .signals/ for dashboard consumption and noted in the journal for persistence.
SKILL.mdUpdated Jul 22, 2026
williamlimasilva/markstream-install
development
VerifiedTrustedCommunity
Install and configure Markstream streaming Markdown renderers for Vue, React, Svelte, Angular, Nuxt, and Vue 2 applications. Use for package selection, minimal peer dependencies, CSS order, SSR boundaries, streaming mode, and renderer setup.
SKILL.mdUpdated Jul 22, 2026