google-github-actions / google-github-actions/run-gemini-cli
Audience should be exposed when using WIF
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 2.1k
- Forks
- 285
- Avg merge
- 8h 8m
- Merged PRs (30d)
- 1
Description
TL;DR
We want to be able to use a custom audience to use our WIF.
Detailed design
If a Workload Identity Federation filters on a non default audience, this action will fail because it will present //iam.googleapis.com/projects/xxx/locations/global/workloadIdentityPools/yyy/providers/zzz where x is the project number, y the project id and z the provider id.
We need to expose the audience parameter (same as auth)
Additional information
No response
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing how this action configures Workload Identity Federation and compare its inputs with the workload identity federation inputs in the linked auth documentation. Verify the current audience sent for a non-default provider and define done as allowing a custom audience to be passed through successfully.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions, google-cloud, typescript
- Domain
- authentication, ci-cd, cloud
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100