bcc-code/Sign GitHub App token with Azure
Sign GitHub App token with private key stored in Azure KeyVault
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stalelast commit Jan 5, 2025
- License
- Apache 2.0
Pinned Snippet
uses: bcc-code/az-keyvault-sign-token@2728e625145afe5d15e8c4d8238603b4dfef7779 # v1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| gh-app-client-id | The Client ID of the GitHub App to sign the token for | yes | — |
| gh-installation-id | The installation ID of the GitHub App | no | "" |
| gh-org | The org to fetch the installation ID from | no | "" |
| token-duration | The duration in seconds for which the token will be valid | no | 300 |
| key-vault-name | The name of the Azure Key Vault resource that holds the GitHub App private key | yes | — |
| key-name | The name of the key in the Azure Key Vault resource that holds the GitHub App private key | yes | — |
Outputs
| name | description |
|---|---|
| gh_token | The resulting GitHub token, signed with the key stored in Azure Key Vault |