1- # .github/workflows/pr-validate.yml
1+
22name : PR Validation via OIDC !!!!!!!!!!!!!!!!!!!!!
33
44on :
55 pull_request_target :
66 types : [opened, synchronize]
77
88permissions :
9- id-token : write # enable OIDC token issuance
10- contents : read # allow checkout of code
9+ id-token : write
10+ contents : read
1111
1212env :
1313 CLIENT_ID : ${{ secrets.AZURE_CLIENT_ID }}
6060 - name : π Request OIDC token from GitHub
6161 id : fetch_token
6262 run : |
63- echo "π Requesting OIDC token... "
63+ echo "Requesting OIDC token"
6464 raw=$(curl -s \
6565 -H "Authorization: Bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" \
6666 "${ACTIONS_ID_TOKEN_REQUEST_URL}&audience=api://${CLIENT_ID}")
@@ -70,11 +70,12 @@ jobs:
7070 echo "TOKEN=$token" >> $GITHUB_ENV
7171
7272 # 3. Send a simple GET request to "/"
73- - name : π‘ Send GET request to protected root endpoint
73+ - name : Send GET request to protected root endpoint
7474 run : |
75- echo "π GET $API_BASE/"
75+
76+ echo " GET request"
7677 response=$(curl -s -H "Authorization: Bearer $TOKEN" "$API_BASE/")
77- echo "π GET response:"
78+ echo " GET response:"
7879 echo "$response" | jq . || true
7980
8081
@@ -91,15 +92,11 @@ jobs:
9192 result_status=$(echo "$response" | jq -r '.status // empty')
9293 message=$(echo "$response" | jq -r '.message // "No message provided"')
9394
94- # Print for debugging
95- echo "π§ͺ result_status: $result_status"
96- echo -e "π© message:\n$message"
97-
9895 # Handle result
9996 if [ "$result_status" != "passed" ]; then
10097 echo -e "β Validation failed:\n$message"
10198 exit 1
10299 fi
103100
104- echo "β
Validation passed: $message"
101+ echo "β
$message"
105102
0 commit comments