Reference

apex oidc

OIDC: what this issuer publishes, and what a token says it is

apex oidc [command]

Examples

The discovery document a cloud provider fetches to trust these tokens.

apex oidc discovery

Fold the calling workflow into a repository's subject claim.

apex oidc subject set acme/web --claim repo context job_workflow_ref

Subcommands

apex oidc discovery

The OIDC discovery document, as a cloud provider fetches it

apex oidc discovery [options]
Options
OptionDescription
--jsonmachine-readable output

apex oidc subject

A repository's OIDC subject claim (repository admin)

apex oidc subject [command] <repository>

With an API token, needs the permission actions:read.

Arguments
ArgumentDescription
<repository>owner/repo

apex oidc subject set

Fold claims into the subject, or reset to the default with no --claim

apex oidc subject set [options] <repository>

With an API token, needs the permission actions:write.

Arguments
ArgumentDescription
<repository>owner/repo
Options
OptionDescription
--claim <key...>claim keys, in the order they appear in the subject