Point to OIDC debugger
This commit is contained in:
parent
7c1d54bea7
commit
400b51b0c2
@ -62,6 +62,10 @@ some common sources of errors:
|
|||||||
Account on an attribute unless you map that value from the incoming GitHub
|
Account on an attribute unless you map that value from the incoming GitHub
|
||||||
OIDC token.
|
OIDC token.
|
||||||
|
|
||||||
|
You can use the [GitHub Actions OIDC Debugger][oidc-debugger] to print the
|
||||||
|
list of token claims and compare them to your Attribute Mappings and
|
||||||
|
Attribute Conditions.
|
||||||
|
|
||||||
1. Ensure you have the correct casing and capitalization. GitHub does not
|
1. Ensure you have the correct casing and capitalization. GitHub does not
|
||||||
distinguish between "foobar" and "FooBar", but Google Cloud does. Ensure any
|
distinguish between "foobar" and "FooBar", but Google Cloud does. Ensure any
|
||||||
**Attribute Conditions** use the correct capitalization.
|
**Attribute Conditions** use the correct capitalization.
|
||||||
@ -229,3 +233,4 @@ cat credentials.json | jq -r tostring
|
|||||||
[wif-byte-limit]: https://cloud.google.com/iam/docs/configuring-workload-identity-federation
|
[wif-byte-limit]: https://cloud.google.com/iam/docs/configuring-workload-identity-federation
|
||||||
[cal]: https://cloud.google.com/logging/docs/audit/configure-data-access
|
[cal]: https://cloud.google.com/logging/docs/audit/configure-data-access
|
||||||
[github-secrets]: https://docs.github.com/en/actions/security-guides/encrypted-secrets
|
[github-secrets]: https://docs.github.com/en/actions/security-guides/encrypted-secrets
|
||||||
|
[oidc-debugger]: https://github.com/github/actions-oidc-debugger
|
||||||
|
Loading…
Reference in New Issue
Block a user