Point to OIDC debugger

This commit is contained in:
Seth Vargo 2022-11-18 10:13:17 -05:00
parent 7c1d54bea7
commit 400b51b0c2
Failed to extract signature

View File

@ -62,6 +62,10 @@ some common sources of errors:
Account on an attribute unless you map that value from the incoming GitHub Account on an attribute unless you map that value from the incoming GitHub
OIDC token. OIDC token.
You can use the [GitHub Actions OIDC Debugger][oidc-debugger] to print the
list of token claims and compare them to your Attribute Mappings and
Attribute Conditions.
1. Ensure you have the correct casing and capitalization. GitHub does not 1. Ensure you have the correct casing and capitalization. GitHub does not
distinguish between "foobar" and "FooBar", but Google Cloud does. Ensure any distinguish between "foobar" and "FooBar", but Google Cloud does. Ensure any
**Attribute Conditions** use the correct capitalization. **Attribute Conditions** use the correct capitalization.
@ -229,3 +233,4 @@ cat credentials.json | jq -r tostring
[wif-byte-limit]: https://cloud.google.com/iam/docs/configuring-workload-identity-federation [wif-byte-limit]: https://cloud.google.com/iam/docs/configuring-workload-identity-federation
[cal]: https://cloud.google.com/logging/docs/audit/configure-data-access [cal]: https://cloud.google.com/logging/docs/audit/configure-data-access
[github-secrets]: https://docs.github.com/en/actions/security-guides/encrypted-secrets [github-secrets]: https://docs.github.com/en/actions/security-guides/encrypted-secrets
[oidc-debugger]: https://github.com/github/actions-oidc-debugger