generated from actions/typescript-action
-
Notifications
You must be signed in to change notification settings - Fork 736
Closed
Labels
bugSomething isn't workingSomething isn't working
Description
The action is currently incompatible with any organisation belonging to a GitHub Enterprise Cloud instance that has followed the hardening guidance to customize the issuer value:
Error: Failed to get ID token: unexpected "iss" claim value
With the GitHub Actions OIDC Custom Issuer Policy enabled (i.e. include_enterprise_slug=true), the Enterprise Cloud issuer becomes https://token.actions.githubusercontent.com/${enterpriseSlug}.
Ideally, the action would dynamically retrieve the correct enterpriseSlug given the runtime context; alternatively it should support an optional enterpriseSlug input parameter to be suffixed to the calculated issuer.
bogdan-nicorici and boogy
Metadata
Metadata
Assignees
Labels
bugSomething isn't workingSomething isn't working