README.md

github/create-token

Create ephemeral GitHub token

Inputs

Name	Description	Required	Default
vault-instance	The Vault instance to use for GitHub token retrieval	false	ci-prod
token-policy	Vault role to assume for GitHub token retrieval if using wildcards in the subclaims.	false
skip-token-revoke	If true, skip revoking the GitHub token on exit	false	false

Outputs

Name	Description
token	The GitHub ephemeral token

Usage

my-job:
  permissions:
    id-token: write
  steps:
    - uses: elastic/oblt-actions/github/create-token@v1
      id: fetch-token

    - uses: ...
      with:
        github-token: ${{ steps.fetch-token.outputs.token }}