adding meta issuers

Signed-off-by: Javan lacerda <javanlacerda@google.com>
javanlacerda · Jun 4, 2024 · d575f1b · d575f1b
1 parent 61faaa2
commit d575f1b
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/pkg/poc/pkg/providers.yaml b/pkg/poc/pkg/providers.yaml
@@ -10,6 +10,10 @@ providers:
             - "{{.url}}/{{.job_workflow_ref}}"
         defaults:
             url: https://github.com
+        meta-issuers:
+            - issuer-url: "https://token.actions.githubusercontent.com/*"
+              client-id: "sigstore"
+              type: "github-workflow"
     gitlab:
         extensions:
             build-signer-digest: ci_config_sha

diff --git a/pkg/poc/pkg/reader.go b/pkg/poc/pkg/reader.go
@@ -81,6 +81,7 @@ type Provider struct {
 	Uris        []string
 	Defaults    map[string]string
 	OIDCIssuers []OIDCIssuer `yaml:"oidc-issuers,omitempty"`
+	MetaIssuers []OIDCIssuer `yaml:"meta-issuers,omitempty"`
 }
 
 func ApplyTemplate(path string, data map[string]string, defaultData map[string]string) string {
@@ -184,6 +185,7 @@ func main() {
 			Extensions:  finalExtensions,
 			Uris:        finalUris,
 			OIDCIssuers: provider.OIDCIssuers,
+			MetaIssuers: provider.MetaIssuers,
 		}
 		finalObj.Providers[k] = provider
 	}