Skip to content

Support customized issuer values for GitHub Enterprise Cloud #222

@isometry

Description

@isometry

The action is currently incompatible with any organisation belonging to a GitHub Enterprise Cloud instance that has followed the hardening guidance to customize the issuer value:

Error: Failed to get ID token: unexpected "iss" claim value

With the GitHub Actions OIDC Custom Issuer Policy enabled (i.e. include_enterprise_slug=true), the Enterprise Cloud issuer becomes https://token.actions.githubusercontent.com/${enterpriseSlug}.

Ideally, the action would dynamically retrieve the correct enterpriseSlug given the runtime context; alternatively it should support an optional enterpriseSlug input parameter to be suffixed to the calculated issuer.

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions