Add 'check_run_id' unchecked claim to GitHub OIDC model (#18972)

di · web-flow · commit be41936f2a09 · 2025-10-30T19:25:31.000-04:00
diff --git a/tests/unit/oidc/models/test_github.py b/tests/unit/oidc/models/test_github.py
@@ -212,6 +212,7 @@ def test_github_publisher_all_known_claims(self):
             "enterprise",
             "enterprise_id",
             "ref_protected",
+            "check_run_id",
         }
 
     def test_github_publisher_computed_properties(self):
diff --git a/warehouse/oidc/models/github.py b/warehouse/oidc/models/github.py
@@ -213,6 +213,7 @@ class GitHubPublisherMixin:
         "enterprise",
         "enterprise_id",
         "ref_protected",
+        "check_run_id",
     }
 
     # Get the most specific publisher from a list of publishers,

Original file line number	Diff line number	Diff line change
`@@ -212,6 +212,7 @@ def test_github_publisher_all_known_claims(self):`
`212`	`212`	`"enterprise",`
`213`	`213`	`"enterprise_id",`
`214`	`214`	`"ref_protected",`
	`215`	`+ "check_run_id",`
`215`	`216`	`}`
`216`	`217`
`217`	`218`	`def test_github_publisher_computed_properties(self):`
Original file line number	Diff line number	Diff line change
`@@ -213,6 +213,7 @@ class GitHubPublisherMixin:`
`213`	`213`	`"enterprise",`
`214`	`214`	`"enterprise_id",`
`215`	`215`	`"ref_protected",`
	`216`	`+ "check_run_id",`
`216`	`217`	`}`
`217`	`218`
`218`	`219`	`# Get the most specific publisher from a list of publishers,`