Skip to content

Commit

Permalink
Added GitLab OIDC documentation to the /docs/oidc.md file that was mi…
Browse files Browse the repository at this point in the history
…ssing. (#1574)

The example was copied over from https://docs.sigstore.dev/certificate_authority/oidc-in-fulcio/ documentation.

Signed-off-by: Tanner Jones <alltechguyblog@gmail.com>
  • Loading branch information
tannerjones4075 committed Feb 20, 2024
1 parent 1145efa commit e2d990f
Showing 1 changed file with 28 additions and 0 deletions.
28 changes: 28 additions & 0 deletions docs/oidc.md
Expand Up @@ -212,6 +212,34 @@ The token must include the following claims:

All other required claims are extracted and included in custom OID fields, as documented in [OID Information](oid-info.md).

### GitLab

The token must include the following claims:

```json
{
"namespace_id": "72",
"namespace_path": "my-group",
"project_id": "20",
"project_path": "my-group/my-project",
"pipeline_id": "574",
"pipeline_source": "push",
"job_id": "302",
"ref": "main",
"ref_type": "branch",
"runner_id": 1,
"runner_environment": "gitlab-hosted",
"sha": "714a629c0b401fdce83e847fc9589983fc6f46bc",
"project_visibility": "public",
"ci_config_ref_uri": "gitlab.com/my-group/my-project//.gitlab-ci.yml@refs/heads/main"
}
```

`ci_config_ref_uri` is included as a SAN URI: `https://{ci_config_ref_uri}`

All other required claims are extracted and included in custom OID fields, as documented in [OID Information](https://github.com/sigstore/fulcio/blob/main/docs/oid-info.md#mapping-oidc-token-claims-to-fulcio-oids).


### SPIFFE

The token must include the following claims:
Expand Down

0 comments on commit e2d990f

Please sign in to comment.