Create service principal for GitHub to use
SUBID=""
APPNAME=""
az ad sp create-for-rbac --name $APPNAME --role contributor \
--scopes /subscriptions/$SUBID \
--sdk-auth
https://docs.microsoft.com/en-us/azure/developer/github/connect-from-azure