-
Notifications
You must be signed in to change notification settings - Fork 4
Description
In one of my projects, we use reusable workflow files to split up our workflow across several files.
When I set up the OIDC publishing technique for our NPM packages, it expected and required the name of the root workflow file that then invokes the reusable workflow file where we perform the npm publish.
With the NuGet version of this, it seems it is expecting the name of the reusable workflow file instead of the root workflow file. Would love if this could be normalized to allow/require the root workflow file to be specified as the workflow file when configuring this on nuget.org, which will reduce friction especially in projects that might have many publish steps across many reusable workflow files that are all invoked by a single root workflow file.
Error message:
Requesting GitHub OIDC token from: https://run-actions-2-azure-eastus.actions.githubusercontent.com/34//idtoken/****/****?api-version=2.0&audience=https%3A%2F%2Fwww.nuget.org
Error: Token exchange failed (401): Workflow mismatch for policy 'Coalesce': expected 'release.yml', actual 'part-publish.yml'
Root workflow file: https://github.com/IntelliTect/Coalesce/blob/2e4dbbbbd4c3250ab30ea559c3912039d5c4fb94/.github/workflows/release.yml#L46-L47
Reusable workflow file: https://github.com/IntelliTect/Coalesce/blob/e4c504820857c3bcbc07d7fbffcbcac80b57e018/.github/workflows/part-publish.yml#L55-L63