Hacktoberfest 2026: los issues que los mantenedores marcaron para octubre, abiertos y aptos para principiantes. Explorar issues de Hacktoberfest

How do I use JFrog OIDC credentials to run a container in another job?

Abierto
  • ¿Algo no está bien?
#361 0 comentarios 0 reacciones 0 asignados Ver en GitHub

Nadie ha tomado este issue todavía.

Evaluación

Dificultad
4/5
Tiempo estimado
3-5 días
Aptitud para principiantes
42/100
Tipo de issue
Nueva funcionalidad
Claridad
Bastante claro
Estado de actividad
Activo
Stack tecnológico
github-actions, typescript
Área
authentication, ci-cd

Línea de trabajo

Start by reading src/oidc-utils.ts around the core.setSecret calls identified in the issue, and trace how the OIDC username and token become action outputs. Consider the interaction between secret masking and GitHub Actions job outputs before proposing a change. Done means the credentials can be passed to another job as described without compromising their handling.

Escrito por el modelo de indexación a partir del texto del issue.

Descripción

bug
Describe the bug

Currently, it's not possible to obtain OIDC credentials and then use them to run code on a different container

Mainly because {{ steps.jfrog.outputs.oidc-user }} and {{ steps.jfrog.outputs.oidc-password }} are marked as secrets using
https://github.com/jfrog/setup-jfrog-cli/blob/v5.3.0/src/oidc-utils.ts#L159

        core.setSecret(accessToken);
        core.setSecret(username);

by forking the repo and removing this lines, I was successfully able to do this:

name: Run a Container Hosted In Jfrog
run-name: Run a Container Hosted In Jfrog

permissions:
  contents: read
  id-token: write

on:
    workflow_dispatch:

jobs:
  jfrog_auth:
    name: "JFrog Authentication"
    runs-on: default
    outputs:
      jfrog_username: ${{ steps.jfrog.outputs.oidc-user }}
      jfrog_password: ${{ steps.jfrog.outputs.oidc-token }}

    steps:
      - name: Setup JFrog CLI (OIDC)
        id: jfrog
        uses: jfrog/setup-jfrog-cli@v5
        with:
          oidc-provider-name: MY_OIDC_PROVIDER_NAME
          oidc-audience: MY_OIDC_AUDIENCE
        env:
          JF_URL: https://MYORG.jfrog.io


  next_gen_web:
    runs-on: default
    needs: jfrog_auth
    container:
      image: MYORG.jfrog.io/MY_PATH/MY_CONTAINER:latest
      credentials:
        username: "${{ needs.jfrog_auth.outputs.jfrog_username }}"
        password: "${{ needs.jfrog_auth.outputs.jfrog_password }}"
    steps:
      - run: |
          echo "This is running from inside of MYORG.jfrog.io/MY_PATH/MY_CONTAINER:latest"
Current behavior

oidc-user and oidc-password can not be transmitted between jobs

Reproduction steps

the code above

Expected behavior

the code above should work

Setup JFrog CLI version

jfrog/setup-jfrog-cli@v5

JFrog CLI version

none

Workflow operating system type and version

github actions

JFrog Artifactory version (if relevant)

No response

JFrog Xray version (if relevant)

No response

Lenguaje dominante
TypeScript
Estrellas
267
Forks
114
Merge medio
10 min
PR fusionados (30 d)
3

Preparar el entorno

Primeros pasos

  1. Lee el issue completo y luego la guía de contribución del proyecto.
  2. Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
  3. Haz un fork del repositorio y trabaja en una rama.
  4. Abre un pull request que haga referencia al número del issue.

Más de jfrog/setup-jfrog-cli

Todos los issues de jfrog/setup-jfrog-cli

Issues similares

Más issues de TypeScript

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.