Add oidc-only flag

Author: pavelzw

action.yml

@@ -15,6 +15,10 @@ inputs:
     oidc-audience:
         description: "By default, this is the URL of the GitHub repository owner, such as the organization that owns the repository."
         required: false
+    oidc-only:
+        description: "Set to true to only authenticate using OIDC and not set up JFrog CLI."
+        default: "false"
+        required: false
     disable-job-summary:
         description: "Set to true to disable the generation of Job Summaries."
         default: "false"

lib/main.js

@@ -40,8 +40,13 @@ function main() {
             core.startGroup('Setup JFrog CLI');
             utils_1.Utils.setCliEnv();
             let jfrogCredentials = yield utils_1.Utils.getJfrogCredentials();
-            yield utils_1.Utils.getAndAddCliToPath(jfrogCredentials);
-            yield utils_1.Utils.configJFrogServers(jfrogCredentials);
+            if (core.getInput(utils_1.Utils.OIDC_ONLY) !== 'true') {
+                yield utils_1.Utils.getAndAddCliToPath(jfrogCredentials);
+                yield utils_1.Utils.configJFrogServers(jfrogCredentials);
+            }
+            else {
+                core.debug('Skipping JFrog CLI setup as oidc-only is enabled.');
+            }
         }
         catch (error) {
             core.setFailed(error.message);

lib/utils.js

@@ -929,6 +929,8 @@ Utils.CLI_REMOTE_ARG = 'download-repository';
 Utils.OIDC_AUDIENCE_ARG = 'oidc-audience';
 // OpenID Connect provider_name input
 Utils.OIDC_INTEGRATION_PROVIDER_NAME = 'oidc-provider-name';
+// Whether to skip JFrog CLI setup and only use OIDC
+Utils.OIDC_ONLY = 'oidc-only';
 // Application yaml root key
 Utils.APPLICATION_ROOT_YML = 'application';
 // Application Config file key, yaml should look like:

src/main.ts

@@ -6,8 +6,12 @@ async function main() {
         core.startGroup('Setup JFrog CLI');
         Utils.setCliEnv();
         let jfrogCredentials: JfrogCredentials = await Utils.getJfrogCredentials();
-        await Utils.getAndAddCliToPath(jfrogCredentials);
-        await Utils.configJFrogServers(jfrogCredentials);
+        if (core.getInput(Utils.OIDC_ONLY) !== 'true') {
+            await Utils.getAndAddCliToPath(jfrogCredentials);
+            await Utils.configJFrogServers(jfrogCredentials);
+        } else {
+            core.debug('Skipping JFrog CLI setup as oidc-only is enabled.');
+        }
     } catch (error) {
         core.setFailed((<any>error).message);
     } finally {

src/utils.ts

@@ -60,6 +60,8 @@ export class Utils {
     private static readonly OIDC_AUDIENCE_ARG: string = 'oidc-audience';
     // OpenID Connect provider_name input
     private static readonly OIDC_INTEGRATION_PROVIDER_NAME: string = 'oidc-provider-name';
+    // Whether to skip JFrog CLI setup and only use OIDC
+    public static readonly OIDC_ONLY: string = 'oidc-only';
     // Application yaml root key
     private static readonly APPLICATION_ROOT_YML: string = 'application';
     // Application Config file key, yaml should look like: