Skip to content

Commit d2ea69d

Browse files
committed
debugging assuming role with OIDC.
1 parent 33a8213 commit d2ea69d

File tree

1 file changed

+7
-1
lines changed

1 file changed

+7
-1
lines changed

.github/workflows/release-publish-ossrh.yml

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -56,11 +56,17 @@ jobs:
5656
- name: Checkout repository
5757
uses: actions/checkout@v6
5858

59+
- name: Debug OIDC token
60+
run: |
61+
TOKEN=$(curl -s -H "Authorization: bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" \
62+
"$ACTIONS_ID_TOKEN_REQUEST_URL&audience=sts.amazonaws.com")
63+
echo "$TOKEN" | jq -r '.value' | cut -d. -f2 | base64 -d 2>/dev/null | jq '.sub, .aud'
64+
5965
- name: set aws credentials
6066
uses: aws-actions/configure-aws-credentials@v4
6167
with:
6268
role-to-assume: arn:aws:iam::752443094709:role/github-actions
63-
role-session-name: github-actions
69+
role-session-name: aws-auth-action
6470
aws-region: ${{ env.AWS_REGION }}
6571

6672
- name: Get secrets by name

0 commit comments

Comments
 (0)