Merge pull request #913 from microsoft/psl-pk-pipelinefix

refactor: Refactor JSON error handling and remove allowedFqdnList

Author: Roopan-Microsoft

infra/main.waf.parameters.json

@@ -91,25 +91,6 @@
     },
     "MCPContainerRegistryHostname": {
       "value": "${AZURE_ENV_CONTAINER_REGISTRY_ENDPOINT}"
-    },
-    "allowedFqdnList": {
-      "value": [
-        "mcr.microsoft.com",
-        "openai.azure.com",
-        "cognitiveservices.azure.com",
-        "login.microsoftonline.com",
-        "management.azure.com",
-        "aiinfra.azure.com",
-        "aiinfra.azure.net",
-        "aiinfra.azureedge.net",
-        "blob.core.windows.net",
-        "database.windows.net",
-        "vault.azure.net",
-        "monitoring.azure.com",
-        "dc.services.visualstudio.com",
-        "azconfig.io",
-        "azconfig.azure.net"
-      ]
     }
   }
 }

infra/scripts/validate_bicep_params.py

@@ -108,7 +108,9 @@ def parse_parameters_env_vars(json_path: Path) -> dict[str, list[str]]:
         data = json.loads(sanitized)
         params = data.get("parameters", {})
     except json.JSONDecodeError:
-        pass
+        # Malformed JSON cannot be reliably parsed for env-var extraction;
+        # return an empty mapping so the caller can still proceed.
+        return {}
 
     # Walk each top-level parameter and scan its entire serialized value
     # for ${VAR} references from the original text.