Add Github to fulcioca path. (#184)

Fixes: #183 Signed-off-by: Matt Moore <mattomata@gmail.com>
sigstore · Sep 14, 2021 · 546e5a3 · 546e5a3
1 parent 922b7cd
commit 546e5a3
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/pkg/ca/fulcioca/fulcioca.go b/pkg/ca/fulcioca/fulcioca.go
@@ -51,6 +51,12 @@ func CreateClientCertificate(rootCA *x509.Certificate, subject *challenges.Chall
 			return "", nil, err
 		}
 		cert.URIs = []*url.URL{challengeURL}
+	case challenges.GithubWorkflowValue:
+		jobWorkflowURI, err := url.Parse(subject.Value)
+		if err != nil {
+			return "", nil, err
+		}
+		cert.URIs = []*url.URL{jobWorkflowURI}
 	}
 	certBytes, err := x509.CreateCertificate(rand.Reader, cert, rootCA, publicKeyPEM, privKey)
 	if err != nil {