Nathan Smith

Ok, so the question is: is it worth it? I still think that it is and as mentioned by @quinnj the deprecation of ` ? : ` seems justified on...

In other words: pleeeeeeeeeease :)

`ed25519` is already supported. See https://masterminds.github.io/sprig/crypto.html

👋🏻 Hey @na-- and @olegbespalov, are ya'll still looking for some help on this feature (per the `help-wanted` label)? I'm happy to help out how ever necessary as this feature...

Yeah, I don't want to block on ya'll going ahead and implementing yourself. I might try to hack together something to try this soon, but I'm not sure on timescale...

@MarshallOfSound Still marked as "planned" on Canny as it has been for a while... In any case, we use https://pkg.go.dev/github.com/coreos/go-oidc/v3/oidc#IDTokenVerifier.Verify to verify token which should be conformant to the [OIDC...

😆 Yeah I'm honestly tempted to patch the OIDC library to be closer to the spec. I've you've got an leverage as a customer with them and can push them...

@jerdog I'm a little tentative about accepting tokens from CircleCI. Unfortunately the implementation only allows adding audiences to the one token issued per-build. If someone configures more than one client...

should perhaps print a warning to users at time of loading the module...

I like this! Definitely helps with the use case I had trying to modify an nginx image to run on different port to work on Cloud run. The ignition spec...