Merge pull request #1 from rrednaxela/master

Update attribute mappings to match assertions

Author: Cyclenerd

README.md

@@ -67,8 +67,9 @@ Attribute mapping:
 |------------------------|-------------------------------------------------------|
 | `google.subject`       | `assertion.sub`                                       |
 | `attribute.sub`        | `assertion.sub`                                       |
-| `attribute.actor`      | `assertion.actor`                                     |
 | `attribute.repository` | `assertion.project_path` (not `assertion.repository`) |
+| `attribute.user_login` | `assertion.user_login`                                |
+| `attribute.ref`        | `assertion.ref`                                       |
 
 <!-- BEGIN_TF_DOCS -->
 ## Providers

main.tf

@@ -70,14 +70,15 @@ resource "google_iam_workload_identity_pool_provider" "provider" {
 
   attribute_mapping = {
     "google.subject"       = "assertion.sub"
-    "attribute.sub"        = "attribute.sub"
-    "attribute.actor"      = "assertion.actor"
+    "attribute.sub"        = "assertion.sub"
+    "attribute.user_login" = "assertion.user_login"
     "attribute.repository" = "assertion.project_path"
+    "attribute.ref"        = "assertion.ref"
   }
   oidc {
     allowed_audiences = [var.allowed_audiences]
     issuer_uri        = var.issuer_uri
   }
 
   depends_on = [google_iam_workload_identity_pool.pool]
-}
+}