github bugs

Signed-off-by: William Woodruff <william@astral.sh>

Author: woodruffw

.github/workflows/test.yml

@@ -26,8 +26,10 @@ jobs:
 
       - name: Set output
         id: beacon
+        # Note: base64 encode the token to avoid GitHub's ridiculous output value
+        # filtering behavior.
         run: |
-          echo "id-token=$(cat ./oidc-token.txt)" >> ${GITHUB_OUTPUT}
+          echo "id-token=$(base64 < ./oidc-token.txt)" >> ${GITHUB_OUTPUT}
 
   attest-basic:
     name: "Selftest: basic attestation generation"

action.py

@@ -6,6 +6,7 @@
 # ]
 # ///
 
+import base64
 import logging
 import os
 import shlex
@@ -147,6 +148,7 @@ def main() -> None:
     dists = _collect_dists(path_patterns)
 
     if id_token := _get_input("id-token"):
+        id_token = base64.b64decode(id_token).decode("utf-8")
         id_token = oidc.IdentityToken(raw_token=id_token)
     else:
         id_token = _get_id_token()