keycardai/Keycard Auth
Exchange a GitHub Actions OIDC token for credentials via Keycard STS.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| zone-url | Base URL of the Keycard zone (e.g., https://<id>.keycard.cloud). | yes | — |
| audience | Audience to request in the GHA OIDC token. Defaults to zone-url. | no | — |
| credentials | YAML list of credentials to fetch. Each entry: - resource: <urn> # required, Keycard resource identifier type: env | file | <provider> # required; see README for provider list scope: <scope> # optional, OAuth scope to request on the resource env-name: <NAME> # required when type=env; optional override for provider types file-path: <path> # required when type=file file-mode: "0600" # optional, default 0600. Must be quoted. <provider>: # required when type=<provider>; see README for fields ... | yes | — |
Outputs
no outputs