Use the REST API to interact with JWTs for OIDC subject claims in GitHub Actions.
About GitHub Actions OIDCYou can use the REST API to query and manage a customization template for an OpenID Connect (OIDC) subject claim. For more information, see OpenID Connect.
Get the customization template for an OIDC subject claim for an organizationGets the customization template for an OpenID Connect (OIDC) subject claim.
OAuth app tokens and personal access tokens (classic) need the read:org
scope to use this endpoint.
This endpoint works with the following fine-grained token types:
The fine-grained token must have the following permission set:
accept
string
Setting to application/vnd.github+json
is recommended.
org
string Required
The organization name. The name is not case sensitive.
HTTP response status codes for "Get the customization template for an OIDC subject claim for an organization" Status code Description200
A JSON serialized template for OIDC subject claim customization
Code samples for "Get the customization template for an OIDC subject claim for an organization" Request exampleget/orgs/{org}/actions/oidc/customization/sub
cURLJavaScriptGitHub CLICopy to clipboard curl request example
curl -L \ -H "Accept: application/vnd.github+json" \ -H "Authorization: Bearer <YOUR-TOKEN>" \ -H "X-GitHub-Api-Version: 2022-11-28" \ https://api.github.com/orgs/ORG/actions/oidc/customization/sub
A JSON serialized template for OIDC subject claim customization
Example responseResponse schemaStatus: 200
{ "include_claim_keys": [ "repo", "context" ] }
Creates or updates the customization template for an OpenID Connect (OIDC) subject claim.
OAuth app tokens and personal access tokens (classic) need the write:org
scope to use this endpoint.
This endpoint works with the following fine-grained token types:
The fine-grained token must have the following permission set:
accept
string
Setting to application/vnd.github+json
is recommended.
org
string Required
The organization name. The name is not case sensitive.
Body parameters Name, Type, Descriptioninclude_claim_keys
array of strings Required
Array of unique strings. Each claim key can only contain alphanumeric characters and underscores.
HTTP response status codes for "Set the customization template for an OIDC subject claim for an organization" Status code Description201
Empty response
403
Forbidden
404
Resource not found
Code samples for "Set the customization template for an OIDC subject claim for an organization" Request exampleput/orgs/{org}/actions/oidc/customization/sub
cURLJavaScriptGitHub CLICopy to clipboard curl request example
curl -L \ -X PUT \ -H "Accept: application/vnd.github+json" \ -H "Authorization: Bearer <YOUR-TOKEN>" \ -H "X-GitHub-Api-Version: 2022-11-28" \ https://api.github.com/orgs/ORG/actions/oidc/customization/sub \ -d '{"include_claim_keys":["repo","context"]}'
Empty response
Example responseResponse schemaStatus: 201
Gets the customization template for an OpenID Connect (OIDC) subject claim.
OAuth tokens and personal access tokens (classic) need the repo
scope to use this endpoint.
This endpoint works with the following fine-grained token types:
The fine-grained token must have the following permission set:
This endpoint can be used without authentication or the aforementioned permissions if only public resources are requested.
Parameters for "Get the customization template for an OIDC subject claim for a repository" Headers Name, Type, Descriptionaccept
string
Setting to application/vnd.github+json
is recommended.
owner
string Required
The account owner of the repository. The name is not case sensitive.
repo
string Required
The name of the repository without the .git
extension. The name is not case sensitive.
200
Status response
400
Bad Request
404
Resource not found
Code samples for "Get the customization template for an OIDC subject claim for a repository" Request exampleget/repos/{owner}/{repo}/actions/oidc/customization/sub
cURLJavaScriptGitHub CLICopy to clipboard curl request example
curl -L \ -H "Accept: application/vnd.github+json" \ -H "Authorization: Bearer <YOUR-TOKEN>" \ -H "X-GitHub-Api-Version: 2022-11-28" \ https://api.github.com/repos/OWNER/REPO/actions/oidc/customization/sub
Status response
Example responseResponse schemaStatus: 200
{ "use_default": false, "include_claim_keys": [ "repo", "context" ] }
Sets the customization template and opt-in
or opt-out
flag for an OpenID Connect (OIDC) subject claim for a repository.
OAuth app tokens and personal access tokens (classic) need the repo
scope to use this endpoint.
This endpoint works with the following fine-grained token types:
The fine-grained token must have the following permission set:
accept
string
Setting to application/vnd.github+json
is recommended.
owner
string Required
The account owner of the repository. The name is not case sensitive.
repo
string Required
The name of the repository without the .git
extension. The name is not case sensitive.
use_default
boolean Required
Whether to use the default template or not. If true
, the include_claim_keys
field is ignored.
include_claim_keys
array of strings
Array of unique strings. Each claim key can only contain alphanumeric characters and underscores.
HTTP response status codes for "Set the customization template for an OIDC subject claim for a repository" Status code Description201
Empty response
400
Bad Request
404
Resource not found
422
Validation failed, or the endpoint has been spammed.
Code samples for "Set the customization template for an OIDC subject claim for a repository" Request exampleput/repos/{owner}/{repo}/actions/oidc/customization/sub
cURLJavaScriptGitHub CLICopy to clipboard curl request example
curl -L \ -X PUT \ -H "Accept: application/vnd.github+json" \ -H "Authorization: Bearer <YOUR-TOKEN>" \ -H "X-GitHub-Api-Version: 2022-11-28" \ https://api.github.com/repos/OWNER/REPO/actions/oidc/customization/sub \ -d '{"use_default":false,"include_claim_keys":["repo","context"]}'
Empty response
Example responseResponse schemaStatus: 201
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4