mirror of
https://github.com/hashicorp/vault-action.git
synced 2025-11-14 18:13:45 +00:00
Update README.md
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
This commit is contained in:
parent
428825575f
commit
85593d50d5
1 changed files with 3 additions and 2 deletions
|
|
@ -84,8 +84,9 @@ Configure a [Vault role](https://www.vaultproject.io/api/auth/jwt#create-role) f
|
|||
|
||||
- `role_type`: `jwt`
|
||||
|
||||
- `bound_audiences`: `["sigstore"]`. Update this parameter if you change
|
||||
the `aud` claim in the GitHub OIDC token.
|
||||
- `bound_audiences`: `"http//github.com/<org>"`. Update this parameter if
|
||||
you change the `aud` claim in the GitHub OIDC token via the
|
||||
`jwtGithubAudience` parameter in the action config.
|
||||
|
||||
- `user_claim`: Set this to a claim name (e.g., `repository`) in the
|
||||
[GitHub OIDC token](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect#understanding-the-oidc-token).
|
||||
|
|
|
|||
Loading…
Reference in a new issue