diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index f450106..bacb7bd 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -6,29 +6,9 @@ on: pull_request: jobs: - debug: - permissions: - actions: read - id-token: write - contents: read - uses: bdehamer/workflows/.github/workflows/oidc-dump.yml@main build: runs-on: ubuntu-latest - permissions: - id-token: write steps: - - run: | - echo "URL:${ACTIONS_ID_TOKEN_REQUEST_URL}" - echo "TOKEN:${ACTIONS_ID_TOKEN_REQUEST_TOKEN}" - curl "${ACTIONS_ID_TOKEN_REQUEST_URL}&audience=donottrust" \ - -H "Authorization: bearer ${ACTIONS_ID_TOKEN_REQUEST_TOKEN}" \ - -H "Accept: application/json; api-version=2.0" \ - -H "Content-Type: application/json" \ - --silent | jq -r '.value' > oidc_token - echo -e "\nOIDC Token (encoded)" - cat oidc_token - echo -e "\nOIDC Token (decoded)" - cat oidc_token | jq -R 'split(".") | .[0],.[1] | @base64d | fromjson' - uses: actions/checkout@v3 - name: Use Node.js ${{ matrix.node-version }} uses: actions/setup-node@v3 diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 4a1f87a..9dba9a0 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -3,12 +3,6 @@ on: release: types: [created] jobs: - debug: - permissions: - actions: read - id-token: write - contents: read - uses: bdehamer/workflows/.github/workflows/oidc-dump.yml@main build: runs-on: ubuntu-latest permissions: