This is an automated email from the ASF dual-hosted git repository.
sbp pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tooling-asf-example.git
The following commit(s) were added to refs/heads/main by this push:
new bd9088a Add a workflow to POST an OIDC JWT to the ATR
bd9088a is described below
commit bd9088acd176cbbcd3d138cba32ea4d4fddeb2ad
Author: Sean B. Palmer <[email protected]>
AuthorDate: Thu Aug 14 19:03:29 2025 +0100
Add a workflow to POST an OIDC JWT to the ATR
---
.github/workflows/post-oidc-jwt-to-atr.yaml | 28 ++++++++++++++++++++++++++++
pyproject.toml | 4 ++--
src/asf/example/__init__.py | 2 +-
uv.lock | 4 ++--
4 files changed, 33 insertions(+), 5 deletions(-)
diff --git a/.github/workflows/post-oidc-jwt-to-atr.yaml
b/.github/workflows/post-oidc-jwt-to-atr.yaml
new file mode 100644
index 0000000..2a97ed0
--- /dev/null
+++ b/.github/workflows/post-oidc-jwt-to-atr.yaml
@@ -0,0 +1,28 @@
+name: Post GitHub OIDC JWT to the ATR
+on: workflow_dispatch
+jobs:
+ send:
+ permissions:
+ id-token: write
+ contents: read
+ runs-on: ubuntu-latest
+ steps:
+ - name: Request OIDC token
+ id: mint
+ shell: bash
+ run: |
+ set -euo pipefail
+ _url="${ACTIONS_ID_TOKEN_REQUEST_URL}&audience=example"
+ _token="${ACTIONS_ID_TOKEN_REQUEST_TOKEN}"
+ _jwt="$(curl -sS -H "Authorization: bearer ${_token}" "${_url}" | jq
-er '.value')"
+ echo "::add-mask::${_jwt}"
+ echo "jwt=${_jwt}" >> "$GITHUB_OUTPUT"
+
+ - name: POST to ATR
+ shell: bash
+ run: |
+ set -euo pipefail
+ curl -sS -X POST \
+ -H "Content-Type: application/json" \
+ -d "{\"jwt\":\"${{ steps.mint.outputs.jwt }}\"}" \
+ https://release-test.apache.org/api/jwt/github
diff --git a/pyproject.toml b/pyproject.toml
index 96ce03c..3f5dee9 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -5,7 +5,7 @@ build-backend = "hatchling.build"
[project]
name = "asf-example"
# This is automatically updated
-version = "0.0.1-dev3"
+version = "0.0.1-dev4"
description = "Example package for ASF Tooling"
readme = "README.md"
requires-python = ">=3.13"
@@ -48,4 +48,4 @@ select = [
[tool.uv]
# This is automatically updated
-exclude-newer = "2025-08-13T19:13:17Z"
+exclude-newer = "2025-08-14T18:02:56Z"
diff --git a/src/asf/example/__init__.py b/src/asf/example/__init__.py
index 4e805d6..98edcad 100644
--- a/src/asf/example/__init__.py
+++ b/src/asf/example/__init__.py
@@ -37,7 +37,7 @@ import tomlkit.items
PROJECT: Final[str] = "asf-example"
# This is automatically updated
-VERSION: Final[str] = "0.0.1-dev3"
+VERSION: Final[str] = "0.0.1-dev4"
class BumpMode(enum.Enum):
diff --git a/uv.lock b/uv.lock
index db24098..4afd113 100644
--- a/uv.lock
+++ b/uv.lock
@@ -3,11 +3,11 @@ revision = 3
requires-python = ">=3.13"
[options]
-exclude-newer = "2025-08-13T19:13:17Z"
+exclude-newer = "2025-08-14T18:02:56Z"
[[package]]
name = "asf-example"
-version = "0.0.1.dev3"
+version = "0.0.1.dev4"
source = { editable = "." }
dependencies = [
{ name = "pygit2" },
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
