actions/toolkit
2
0
Fork 0
mirror of https://github.com/actions/toolkit.git synced 2026-09-03 00:00:07 +02:00
Code Issues Packages Projects Releases Wiki Activity

remove hard-coded issuer from JWT verification

Browse Source 
Signed-off-by: Brian DeHamer <[email protected]>
This commit is contained in:
Brian DeHamer
2024-08-08 15:10:57 -07:00
parent f003268b32
commit a7e08af9b5
4 changed files with 31 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/attest/__tests__/provenance.test.ts
+1 -1
View File
@@ -8,7 +8,7 @@ import {attestProvenance, buildSLSAProvenancePredicate} from '../src/provenance'
describe('provenance functions', () => {
const originalEnv = process.env
const issuer = 'https://example.com'
const issuer = 'https://token.actions.githubusercontent.com'
const audience = 'nobody'
const jwksPath = '/.well-known/jwks.json'
const tokenPath = '/token'