From bbbd1424f7edd0abd3b3822f3a86fa6b2b49c8e2 Mon Sep 17 00:00:00 2001
From: Seth Vargo <seth@sethvargo.com>
Date: Tue, 21 Sep 2021 12:23:39 -0400
Subject: [PATCH] Add example of attribute mapping repos

---
 README.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/README.md b/README.md
index 92aa547..90d05e8 100644
--- a/README.md
+++ b/README.md
@@ -193,6 +193,13 @@ the [gcloud][gcloud] command-line tool.
         to further restrict the authentication using `--attribute-condition`
         flags.
 
+        For example, you can map the attribute repository values (which can be
+        used later to restrict the authentication to specific repositories):
+
+        ```sh
+        --attribute-mapping="google.subject=assertion.sub,attribute.repository=assertion.repository"
+        ```
+
 1.  Get the full ID for the Workload Identity Provider:
 
     ```sh