Skip to content

Commit fb79fe7

Browse files
committed
debug: add OIDC token claims logging to diagnose CI failure
1 parent 0f7ee11 commit fb79fe7

1 file changed

Lines changed: 5 additions & 0 deletions

File tree

.github/workflows/terraform.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,11 @@ jobs:
2626
if: github.event_name == 'pull_request'
2727

2828
steps:
29+
- name: Debug OIDC Token
30+
run: |
31+
IDTOKEN=$(curl -sS -H "Authorization: bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" "$ACTIONS_ID_TOKEN_REQUEST_URL&audience=sts.amazonaws.com" | jq -r '.value')
32+
echo "$IDTOKEN" | cut -d. -f2 | base64 -d 2>/dev/null | jq '{sub, aud, iss, ref, repository}' || true
33+
2934
- name: Checkout repository
3035
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
3136

0 commit comments

Comments
 (0)