search

Azure / azure-code-signing-action

MIT License
20 stars 5 forks source link

Authenticating with Federated credentials #15

Closed ldennington closed 9 months ago

ldennington commented 9 months ago

Hello! Thanks for your awesome work on this action 🚀. I'm currently onboarding the Git Credential Manager project to Azure Code Sign, and this is going to be super useful for us! However, we'd love to authenticate via Open ID Connect/Federated credentials (see description here). Based on this authentication description and the DefaultAzureCredential supported types, it seems like this type of authentication may not be availble with this action, but I wanted to double check with the experts to make sure 😊.

japarson commented 9 months ago

Hi Lessley, I'm seeing an example in the docs you linked on how an OIDC token can be used with the azure\login action to receive an Azure access token: https://docs.github.com/en/enterprise-server@3.8/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-azure#requesting-the-access-token

This would be compatible with DefaultAzureCredential via AzureCliCredential.

Do you think this workflow would be suitable for your project? I'm not familiar with OIDC and I'm concerned about possibly misunderstanding the example.

ldennington commented 9 months ago

That worked! Thanks @japarson!