From 84791a97e597ec67a39ece8b19ab9e7b75f6a369 Mon Sep 17 00:00:00 2001 From: Jake Awe Date: Wed, 26 Jun 2024 15:39:53 -0500 Subject: [PATCH] final composite actions mint test --- .github/workflows/pr.yaml | 37 ++++++++++++++++++------------------- 1 file changed, 18 insertions(+), 19 deletions(-) diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml index a13ea716d..4eb0a9405 100644 --- a/.github/workflows/pr.yaml +++ b/.github/workflows/pr.yaml @@ -74,32 +74,31 @@ jobs: id-token: write needs: wheel-build steps: - - name: mint API token - run: | - #!/bin/bash + # - name: mint API token + # run: | + # #!/bin/bash - # retrieve the ambient OIDC token - resp=$(curl -H "Authorization: bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" \ - "$ACTIONS_ID_TOKEN_REQUEST_URL&audience=pypi") - oidc_token=$(jq -r '.value' <<< "${resp}") + # # retrieve the ambient OIDC token + # resp=$(curl -H "Authorization: bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" \ + # "$ACTIONS_ID_TOKEN_REQUEST_URL&audience=pypi") + # oidc_token=$(jq -r '.value' <<< "${resp}") - echo "OIDC token: $oidc_token" - echo "Response: $resp" + # echo "OIDC token: $oidc_token" + # echo "Response: $resp" - # exchange the OIDC token for an API token - resp=$(curl -X POST https://test.pypi.org/_/oidc/mint-token -d "{\"token\": \"${oidc_token}\"}") + # # exchange the OIDC token for an API token + # resp=$(curl -X POST https://test.pypi.org/_/oidc/mint-token -d "{\"token\": \"${oidc_token}\"}") - echo "OIDC token: $oidc_token" - echo "Response: $resp" + # echo "OIDC token: $oidc_token" + # echo "Response: $resp" - api_token=$(jq -r '.token' <<< "${resp}") + # api_token=$(jq -r '.token' <<< "${resp}") - # mask the newly minted API token, so that we don't accidentally leak it - echo "::add-mask::${api_token}" - - # see the next step in the workflow for an example of using this step output - echo "api-token=${api_token}" >> "${GITHUB_OUTPUT}" + # # mask the newly minted API token, so that we don't accidentally leak it + # echo "::add-mask::${api_token}" + # # see the next step in the workflow for an example of using this step output + # echo "api-token=${api_token}" >> "${GITHUB_OUTPUT}" - name: Mint GitHub Token uses: rapidsai/shared-actions/mint-pypi-token@mint-pypi-token id: mint-token