Optional actorRegular expression matched against the actor claim.
Optional actorRegular expression matched against the actor_id claim.
Optional enterpriseRegular expression matched against the enterprise claim.
Optional enterpriseRegular expression matched against the enterprise_id claim.
Optional environmentRegular expression matched against the environment claim.
Optional eventRegular expression matched against the event_name claim.
Optional jobRegular expression matched against the job_workflow_ref claim.
Optional refRegular expression matched against the ref claim.
Optional refRegular expression matched against the ref_type claim.
Optional repositoryRegular expression matched against the repository claim.
Optional repositoryRegular expression matched against the repository_id claim.
Optional repositoryRegular expression matched against the repository_owner claim.
Optional repositoryRegular expression matched against the repository_owner_id claim.
Optional repositoryRegular expression matched against the repository_visibility claim.
Optional runnerRegular expression matched against the runner_environment claim.
Regular expression matched against the entire sub (subject) claim, the primary GitHub Actions OIDC
identifier (for example, repo:<OWNER>/<REPO>:ref:refs/heads/main). The pattern must begin with
repo:<OWNER>/, where <OWNER> is a literal repository-owner name rather than a regular expression.
Optional workflowRegular expression matched against the workflow claim.
Optional workflowRegular expression matched against the workflow_ref claim.
Generated using TypeDoc
GitHub Actions OIDC claims to match against. Each field is a regular expression. The
subclaim is required; all other claims are optional. A token matches only when all provided patterns match simultaneously (AND semantics).