You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/actions/security-for-github-actions/security-hardening-your-deployments/configuring-openid-connect-in-jfrog.md
+8-5Lines changed: 8 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -35,7 +35,7 @@ For an example {% data variables.product.prodname_actions %} workflow using the
35
35
36
36
For example, you can set `iss` to `https://token.actions.githubusercontent.com`, and the `repository` to something like "octo-org/octo-repo"`. This will ensure only Actions workflows from the specified repository will have access to your JFrog platform. The following is an example Claims JSON when configuring identity mappings.
oidc-provider-name: 'my-github-provider' # Replace with your configured provider name
76
-
oidc-audience: 'jfrog-github' # Replace with your configured audience
75
+
oidc-provider-name: 'YOUR_PROVIDER_NAME'
76
+
oidc-audience: 'YOUR_AUDIENCE'
77
77
78
78
- name: Upload artifact
79
79
run: jf rt upload "dist/*.zip" my-repo/
80
80
81
81
```
82
82
83
83
> [!TIP]
84
-
> When OIDC authentication is used, the `setup-jfrog-cli` action automatically provides short-lived (`oidc-user` and `oidc-token`) as step outputs. These can be used for Docker, Helm, and other integrations that require authentication with JFrog. No additional configuration is needed to enable these outputs.
84
+
> When OIDC authentication is used, the `setup-jfrog-cli` action automatically provides `oidc-user` and `oidc-token` as step outputs.
85
+
> These can be used for other integrations that require authentication with JFrog.
86
+
> To reference these outputs, ensure the step has an explicit `id` defined (e.g., `id: setup-jfrog-cli`).
85
87
88
+
### Example: Using OIDC Credentials in Other Steps
0 commit comments