From aa96d52e28b6539524969137bd52ad0c0c32858c Mon Sep 17 00:00:00 2001 From: Eldrick Wega Date: Tue, 16 Apr 2024 12:24:23 -0400 Subject: [PATCH 1/5] Add link to OIDC claim debugger (#49738) Co-authored-by: hubwriter --- .../about-security-hardening-with-openid-connect.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/content/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect.md b/content/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect.md index 692c40ef6a..5f8df43143 100644 --- a/content/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect.md +++ b/content/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect.md @@ -250,8 +250,6 @@ curl -H "Authorization: bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" "$ACTIONS_ID_TOK {% data reusables.actions.oidc-permissions-token %} -{% ifversion actions-oidc-hardening-config %} - ## Customizing the token claims You can security harden your OIDC configuration by customizing the claims that are included with the JWT. These customizations allow you to define more granular trust conditions on your cloud roles when allowing your workflows to access resources hosted in the cloud: @@ -476,8 +474,6 @@ To configure the repository to use the organization's template, a repository adm } ``` -{% endif %} - ## Updating your workflows for OIDC You can now update your YAML workflows to use OIDC access tokens instead of secrets. Popular cloud providers have published their official login actions that make it easy for you to get started with OIDC. For more information about updating your workflows, see the cloud-specific guides listed below in "[Enabling OpenID Connect for your cloud provider](#enabling-openid-connect-for-your-cloud-provider)." @@ -502,3 +498,7 @@ To enable and configure OIDC for your specific cloud provider, see the following To enable and configure OIDC for another cloud provider, see the following guide: - "[AUTOTITLE](/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-cloud-providers)" + +## Debugging your OIDC claims + +You can use the [`github/actions-oidc-debugger`](https://github.com/github/actions-oidc-debugger) action to visualize the claims that would be sent, before integrating with a cloud provider. This action requests a JWT and prints the claims included within the JWT that were received from {% data variables.product.prodname_actions %}. From 6dfdcb8c72ab3027cb97c6c737a05aba21f0c424 Mon Sep 17 00:00:00 2001 From: Kevin Heis Date: Tue, 16 Apr 2024 09:31:00 -0700 Subject: [PATCH 2/5] Scroll button scss module (#50164) --- .../ui/ScrollButton/ScrollButton.module.scss} | 6 +++--- src/frame/components/ui/ScrollButton/ScrollButton.tsx | 8 ++++---- src/frame/stylesheets/index.scss | 1 - 3 files changed, 7 insertions(+), 8 deletions(-) rename src/frame/{stylesheets/scroll-button.scss => components/ui/ScrollButton/ScrollButton.module.scss} (55%) diff --git a/src/frame/stylesheets/scroll-button.scss b/src/frame/components/ui/ScrollButton/ScrollButton.module.scss similarity index 55% rename from src/frame/stylesheets/scroll-button.scss rename to src/frame/components/ui/ScrollButton/ScrollButton.module.scss index d2ac8669de..ab9098b5e2 100644 --- a/src/frame/stylesheets/scroll-button.scss +++ b/src/frame/components/ui/ScrollButton/ScrollButton.module.scss @@ -1,11 +1,11 @@ -.transition-200 { +.transition200 { transition: 200ms; } -.opacity-0 { +.opacity0 { opacity: 0; } -.opacity-100 { +.opacity100 { opacity: 1; } diff --git a/src/frame/components/ui/ScrollButton/ScrollButton.tsx b/src/frame/components/ui/ScrollButton/ScrollButton.tsx index f2cbf57332..7746f88e68 100644 --- a/src/frame/components/ui/ScrollButton/ScrollButton.tsx +++ b/src/frame/components/ui/ScrollButton/ScrollButton.tsx @@ -1,6 +1,9 @@ import { useState, useEffect } from 'react' import cx from 'classnames' import { ChevronUpIcon } from '@primer/octicons-react' +import styles from './ScrollButton.module.scss' + +const { transition200, opacity0, opacity100 } = styles export type ScrollButtonPropsT = { className?: string @@ -36,10 +39,7 @@ export const ScrollButton = ({ className, ariaLabel }: ScrollButtonPropsT) => { } return ( -
+