Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: Add support for GitHub Actions OpenID Connect subject claim customization templates #1473

Merged
merged 3 commits into from Jan 11, 2023
Merged

feat: Add support for GitHub Actions OpenID Connect subject claim customization templates #1473

merged 3 commits into from Jan 11, 2023

Conversation

F21
Copy link
Contributor

@F21 F21 commented Jan 10, 2023

Resolves #1458


Behavior

This adds support for OpenID Connect subject claim customization templates for GitHub Actions.
More information regarding this feature here: https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect

Note: This requires features I recently committed to google/go-github, which are currently unreleased, so it pins google/go-github to e4ff2a27f7699954c87d81d723012c1c3f0de0f1. The PR will be updated to pin a released version of go-github as soon as the maintainers tag a new release.

Before the change?

It was not possible to manage OpenID Connect subject claim customization templates for GitHub Actions using Terraform.

After the change?

This change adds 2 resources and 2 data sources for managing OpenID Connect subject claim customization templates on an organization and repository basis:

  • github_actions_organization_oidc_subject_claim_customization_template
  • github_actions_repository_oidc_subject_claim_customization_template
  • data.github_actions_organization_oidc_subject_claim_customization_template
  • data.github_actions_repository_oidc_subject_claim_customization_template

Other information

None.


Additional info

Pull request checklist

  • Tests for the changes have been added (for bug fixes / features)
  • Docs have been reviewed and added / updated if needed (for bug fixes / features)
  • Added the appropriate label for the given change

Does this introduce a breaking change?

  • Yes (Please add the Type: Breaking change label)
  • No

Pull request type

Please add the corresponding label for change this PR introduces:

  • Feature/model/API additions: Type: Feature
  • Updates to docs or samples: Type: Documentation

@F21
Copy link
Contributor Author

F21 commented Jan 10, 2023

/label Type: Feature

@nickfloyd nickfloyd added Type: Feature New feature or request Priority: Normal Status: Blocked Some technical or requirement is blocking the issue labels Jan 10, 2023
@nickfloyd
Copy link
Contributor

@F21 Thank you for these contributions ❤️. We'll wait to do the final review/merge until they drop a new version of go-GitHub and it gets updated here!

@F21
Copy link
Contributor Author

F21 commented Jan 11, 2023

A new release of go-github has been tagged and incorporated into this PR. This is now ready for review.

@nickfloyd nickfloyd merged commit e5cda3a into integrations:main Jan 11, 2023
@kfcampbell
Copy link
Member

kfcampbell commented Jan 11, 2023

@F21 do you mind doing me a favor when you get a moment? It would be awesome to put links to the new docs you created in the github.erb file so they're linked and more easily accessible to users. This recent PR shows an example.

@F21
Copy link
Contributor Author

F21 commented Jan 11, 2023

Thanks for the quick review and merge @nickfloyd and @kfcampbell ! The follow-up PR to add the missing links is in #1480.

@kfcampbell
Copy link
Member

I've merged #1480 and will release it soon, at the same time as this PR.

avidspartan1 pushed a commit to avidspartan1/terraform-provider-github that referenced this pull request Feb 5, 2024
…omization-template

feat: Add support for GitHub Actions OpenID Connect subject claim customization templates
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Status: Blocked Some technical or requirement is blocking the issue Type: Feature New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[FEAT]: Add resources to customize OIDC subject claims
3 participants