Skip to content

Commit e1e907c

Browse files
committed
fix(runners): use oidc.ExpectedAudience constant for GitHub OIDC audience
Signed-off-by: Miguel Martinez <miguel@chainloop.dev> Entire-Checkpoint: b007a5873ce3
1 parent 9006b74 commit e1e907c

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

pkg/attestation/crafter/runners/githubaction.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ func NewGithubAction(ctx context.Context, logger *zerolog.Logger) *GitHubAction
3939
// be done we fallback to reading the env vars directly.
4040
actorPersonal := fmt.Sprintf("https://github.com/%s", os.Getenv("GITHUB_ACTOR"))
4141
actorOrganization := fmt.Sprintf("https://github.com/%s", os.Getenv("GITHUB_REPOSITORY_OWNER"))
42-
client, err := oidc.NewGitHubClient(logger, oidc.WithActor(actorPersonal), oidc.WithActor(actorOrganization), oidc.WithAudience([]string{"chainloop"}))
42+
client, err := oidc.NewGitHubClient(logger, oidc.WithActor(actorPersonal), oidc.WithActor(actorOrganization), oidc.WithAudience([]string{oidc.ExpectedAudience}))
4343
if err != nil {
4444
logger.Debug().Err(err).Msg("failed creating GitHub OIDC client")
4545
return &GitHubAction{

0 commit comments

Comments
 (0)