Skip to content

Commit 2d03d35

Browse files
Switching Azure authentication to OIDC
Signed-off-by: Gary Bright <gary@mondoo.com>
1 parent 862e0be commit 2d03d35

File tree

1 file changed

+4
-8
lines changed

1 file changed

+4
-8
lines changed

.github/workflows/goreleaser.yml

Lines changed: 4 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -89,16 +89,12 @@ jobs:
8989
# jsign and azure-cli are both requirements for Azure Trusted Signing and these actions to authenticate
9090
# These packages have been installed on the self-hosted runner using ansible from the private repo
9191

92-
- name: Log in to Azure for Code Signing
92+
- name: Azure login
9393
uses: azure/login@v2
9494
with:
95-
creds: >-
96-
{
97-
"clientId": "${{ secrets.TSIGN_AZURE_CLIENT_ID }}",
98-
"clientSecret": "${{ secrets.TSIGN_AZURE_CLIENT_SECRET }}",
99-
"tenantId": "${{ vars.TSIGN_AZURE_TENANT_ID}}",
100-
"subscriptionId": "${{ vars.TSIGN_AZURE_SUBSCRIPTION_ID }}"
101-
}
95+
client-id: ${{ secrets.TSIGN_AZURE_CLIENT_ID }}
96+
tenant-id: ${{ vars.TSIGN_AZURE_TENANT_ID}}
97+
subscription-id: ${{ vars.TSIGN_AZURE_SUBSCRIPTION_ID }}
10298

10399
- name: Get Azure AD Access Token to trusted signing
104100
id: get_token

0 commit comments

Comments
 (0)