File tree Expand file tree Collapse file tree 1 file changed +6
-5
lines changed
Expand file tree Collapse file tree 1 file changed +6
-5
lines changed Original file line number Diff line number Diff line change @@ -70,15 +70,15 @@ The simplest authentication method using username and password:
7070 space: myspace
7171` ` `
7272
73- # ## JWT Bearer Token Grant with GitHub OIDC
73+ # ## JWT Bearer Token Grant
7474
75- This method leverages GitHub's OIDC provider for secure, token-based authentication :
75+ This method leverages JWT Bearer token-based authentication :
7676
7777` ` ` yaml
7878name: JWT Bearer Flow using GitHub id_token
7979on: [push]
8080permissions:
81- id-token: write # Required for requesting the JWT
81+ id-token: write # Required for requesting the GitHub JWT
8282 contents: read # Required for actions/checkout
8383jobs:
8484 deploy:
8989 with:
9090 api: ${{ secrets.CF_API }}
9191 grant_type: jwt-bearer
92+ jwt: ${{ secrets.JWT }} # can be omitted when using GitHub id token
9293 org: test
9394 space: dev
9495 - name: run cf command
@@ -103,8 +104,8 @@ This method uses client credentials with JWT verification:
103104name: Client Credentials using GitHub id_token
104105on: [push]
105106permissions:
106- id-token: write
107- contents: read
107+ id-token: write # Required for requesting the GitHub JWT
108+ contents: read # Required for actions/checkout
108109jobs:
109110 deploy:
110111 runs-on: ubuntu-latest
You can’t perform that action at this time.
0 commit comments