From 85593d50d51c513f2db2445b70f1682e2836d197 Mon Sep 17 00:00:00 2001 From: Rosemary Wang <915624+joatmon08@users.noreply.github.com> Date: Fri, 25 Mar 2022 12:31:37 -0400 Subject: [PATCH] Update README.md Co-authored-by: Theron Voran --- README.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 0f5ba47..b062b61 100644 --- a/README.md +++ b/README.md @@ -84,8 +84,9 @@ Configure a [Vault role](https://www.vaultproject.io/api/auth/jwt#create-role) f - `role_type`: `jwt` -- `bound_audiences`: `["sigstore"]`. Update this parameter if you change - the `aud` claim in the GitHub OIDC token. +- `bound_audiences`: `"http//github.com/"`. Update this parameter if + you change the `aud` claim in the GitHub OIDC token via the + `jwtGithubAudience` parameter in the action config. - `user_claim`: Set this to a claim name (e.g., `repository`) in the [GitHub OIDC token](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect#understanding-the-oidc-token).