busbar-actions/Busbar — exchange the GitHub OIDC token for a session in the Busbar-equipped Salesforce org

Exchange the GitHub OIDC token for a short-lived session in a Busbar-equipped Salesforce org (Busbar installed and trust established) — no stored credentials. The Rust port of the `busbar org auth github` sf plugin.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Jun 7, 2026
License
None

Pinned Snippet

workflow.ymlSHA-pinned
uses: busbar-actions/org-auth@cfad52cf4aaa33d977baa6875df4aff4065e603e # no releases — HEAD as of 2026-07-11

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
target-instanceInstance URL of the Busbar-equipped org (e.g. https://my.my.salesforce.com).yes
eca-client-idConsumer key of the BusbarGitHubEca in the Busbar-equipped org (non-secret). Defaults to $ECA_CLIENT_ID / $BUSBAR_ECA_CLIENT_ID.no""
token-handlerOAuth token-exchange handler developer name.noGitHubTokenExchangeHandler
oidc-audienceAudience to request the OIDC token for. Defaults to target-instance (binds the token to this org).no""
aliasOptionally register the resulting session as this local `sf` alias (for steps that shell out to the managed Salesforce CLI).no""
set-defaultSet the registered alias as the default `sf` target-org.notrue
versionRelease tag of the sf-auth binary. Falls back to env.BUSBAR_ACTION_VERSION, then "latest".no""
binary-repoGitHub repo hosting prebuilt binary releases. Falls back to env.BUSBAR_ACTION_REPO, then busbar-actions/actions-dist.no""
namedescription
instance-urlThe Salesforce instance URL the session is valid for.
aliasThe registered sf alias (empty if none).