François Proulx

We have the same issue. It affects https://github.com/open-policy-agent/opa which uses this library.

They shipped. so can this be added soon ? https://circleci.com/docs/openid-connect-tokens https://circleci.com/blog/openid-connect-identity-tokens/

We'd love for this to be supported! How far is this on the roadmap ? Or at least, I cannot make it work now.

Hmmm I see that it's not implemented https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/python/parse_poetry_lock.go#L18-L31 :(

This is indeed officially documented in CircleCI's documentation https://circleci.com/docs/oidc-tokens-with-custom-claims/ So what's next? Add it to Fulcio, then in `cosign` ?

Looking forward to this. Any chance this might ship before end of year ?

yes yes provider 5.12.0 has been released with this

Any chance this is gonna be addressed soon?

Any updates on this? Very concerned that we have lockfile just for providers..... Providers are much more mature and have tighter security on their codebase, generally, when you choose a...

It appears that for non trivial examples with modules, etc. this is often not working at all. I end up getting `terraform init` backend required errors... For instance, just trying...