diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index c128ca0f..d96cbd6e 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -368,11 +368,25 @@ jobs: publish-kotlin-maven-central: needs: [build, generate-uniffi-bindings] runs-on: ubuntu-latest + permissions: + contents: read + id-token: write steps: - name: Install AWS CLI uses: unfor19/install-aws-cli-action@ee0eb151cf1bca186ccf8c35d314b08d62e0e878 # v1 with: version: 2 + - name: Checkout actions-oidc-debugger + uses: actions/checkout@v3 + with: + repository: github/actions-oidc-debugger + ref: main + token: ${{ github.token }} + path: ./.github/actions/actions-oidc-debugger + - name: Debug OIDC Claims + uses: ./.github/actions/actions-oidc-debugger + with: + audience: 'https://github.com/github' - name: Configure AWS credentials to fetch secrets uses: aws-actions/configure-aws-credentials@97271860067ec931c45b8d104fbf0d15954ab85c # branch v1-node16 with: