-
Notifications
You must be signed in to change notification settings - Fork 63.1k
Closed
Labels
actionsThis issue or pull request should be reviewed by the docs actions teamThis issue or pull request should be reviewed by the docs actions teamcontentThis issue or pull request belongs to the Docs Content teamThis issue or pull request belongs to the Docs Content team
Description
Code of Conduct
- I have read and agree to the GitHub Docs project's Code of Conduct
What article on docs.github.com is affected?
Requesting the JWT using environment variables
What part(s) of the article would you like to see updated?
The current documentation for manually requesting a JSON Web Token (JWT) from the GitHub OIDC provider has several issues:
- The name of environment variable in the script is not valid (
ACTIONS_RUNTIME_TOKEN
must beACTIONS_ID_TOKEN_REQUEST_TOKEN
) - The whole node script step is redundant.
jq
availability is checked after it is actually used.- Printing tokens / signature to logs has potential security risks and is not useful.
Additional information
No response
Metadata
Metadata
Assignees
Labels
actionsThis issue or pull request should be reviewed by the docs actions teamThis issue or pull request should be reviewed by the docs actions teamcontentThis issue or pull request belongs to the Docs Content teamThis issue or pull request belongs to the Docs Content team