search

googleapis / google-auth-library-ruby

Google Auth Library for Ruby
Apache License 2.0
471 stars 254 forks source link

Support for GitHub OIDC "external_account" via Workload Identity Federation #432

Open nfgrep opened 1 year ago

nfgrep commented 1 year ago

Using this library from within a github action authed via the recommended method of Workload Identity Federation yields the error: 

Unable to read the credential file specified by GOOGLE_APPLICATION_CREDENTIALS: aws is the only currently supported external account type

It'd be great if GitHub WIF creds were supported by this lib. The alternative for my team right now is to shell out to gcloud or roll our own API calls, both are less than ideal.

Related: https://github.com/inspec/inspec-gcp/issues/437