Repository navigation
Why does automatic evidence collection require OIDC authentication? #323
Description
Activity
Hey, me again. Just was following up on this again and wanted to throw in some extra info. The error seems to come from here on line 25: https://github.com/jfrog/setup-jfrog-cli/blob/master/src/evidence-collection.ts#L23C9-L27C10. I don't really understand the point of only supporting this when doing OIDC.
Might you be able to expand on that and/or recommend a way around it? I'd love to have the automatic evidence collection working.
Thanks for nothing! I ended up going a different route.
How can we help?
We have multiple workflows that utilize this action to enable jfrog-cli usage within github actions. When analyzing the
Post Setup JFrog Clioutput, I noticed this line in the evidence collection section:In our configuration, we are unable to easily and and manage these OIDC providers as described in the "Connecting to JFrog using OIDC (OpenID Connect)" section of the README in this repo, and thus can only use username/password authentication.
The question is, why is this the case? Are there any plans in the works to fix this and thus enable support for automatic evidence upload no matter what the authentication method is?
Thank you!