Description
Update the GitHub Action to support OIDC authentication as an alternative to API keys.
Flow
- Check if
api-key input is provided
- If yes, use API key auth (existing behavior)
- If no, check for
ACTIONS_ID_TOKEN_REQUEST_URL env var
- Request OIDC token from GitHub with
audience: https://api.krakenkey.io
- Exchange OIDC token for KrakenKey access token via
/v1/auth/github-oidc
- Use KrakenKey token for all subsequent API calls
Requirements
- Workflow needs
permissions: id-token: write
- Clear error message if neither API key nor OIDC is available
- Document OIDC setup in README
Acceptance Criteria
Description
Update the GitHub Action to support OIDC authentication as an alternative to API keys.
Flow
api-keyinput is providedACTIONS_ID_TOKEN_REQUEST_URLenv varaudience: https://api.krakenkey.io/v1/auth/github-oidcRequirements
permissions: id-token: writeAcceptance Criteria