Skip to content

Comments

Make token string oidc client available outside of cli#925

Merged
vlsi merged 1 commit intomainfrom
tokenstring
Mar 11, 2025
Merged

Make token string oidc client available outside of cli#925
vlsi merged 1 commit intomainfrom
tokenstring

Conversation

@loosebazooka
Copy link
Member

@vlsi this is step towards making examples work of fork PRs. Once this is in, we need to add an equivalent gradle oidc thing and then inject the token from conformance into it. wdyt?

Signed-off-by: Appu Goundan <appu@google.com>
@loosebazooka loosebazooka requested a review from vlsi March 10, 2025 18:17
@vlsi vlsi merged commit a7592aa into main Mar 11, 2025
25 checks passed
@vlsi vlsi deleted the tokenstring branch March 11, 2025 06:45
@loosebazooka
Copy link
Member Author

@vlsi can we make this an optional input for sigstore-gradle ? It will help us fix tests on forked requests?

@vlsi
Copy link
Collaborator

vlsi commented Mar 24, 2025

I don't fully get what you mean by "optional input for sigstore-gradle".

Do you mean Gradle should be aware the actual value can differ across executions?
Do you mean sign task gets "up-to-date" no matter what the actual token shows up during execution?

@loosebazooka
Copy link
Member Author

loosebazooka commented Mar 24, 2025

Sorry, no I mean, in https://github.com/sigstore/sigstore-java/blob/main/sigstore-gradle/sigstore-gradle-sign-base-plugin/src/main/kotlin/dev/sigstore/sign/OidcClientExtension.kt

and then I'll configure it for the examples dir

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants