5
0
Fork 0
mirror of https://github.com/hashicorp/vault-action.git synced 2025-11-14 18:13:45 +00:00

Update README.md

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
This commit is contained in:
Rosemary Wang 2022-03-25 12:31:37 -04:00 committed by GitHub
parent 428825575f
commit 85593d50d5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -84,8 +84,9 @@ Configure a [Vault role](https://www.vaultproject.io/api/auth/jwt#create-role) f
- `role_type`: `jwt`
- `bound_audiences`: `["sigstore"]`. Update this parameter if you change
the `aud` claim in the GitHub OIDC token.
- `bound_audiences`: `"http//github.com/<org>"`. Update this parameter if
you change the `aud` claim in the GitHub OIDC token via the
`jwtGithubAudience` parameter in the action config.
- `user_claim`: Set this to a claim name (e.g., `repository`) in the
[GitHub OIDC token](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect#understanding-the-oidc-token).