[Experimental]

Exchange a GitHub Actions OIDC token for a workspace service token

⚠️ Experimental endpoint: this API is in active development and may change at any time without notice. ⚠️

Verifies the GitHub Actions OIDC token and mints a short-lived workspace service token. The caller must request the token with audience prisma-cloud. Any verification failure returns a generic 401 — the response never reveals whether a repository is connected.

post/v1/auth/github-actions/token

Request

  • Base URL: https://api.prisma.io
  • URL: https://api.prisma.io/v1/auth/github-actions/token
  • Auth: none required

Request body

tokenstring required

The GitHub Actions OIDC token with audience prisma-cloud.

expiresInSecondsinteger

Requested token lifetime in seconds. Defaults to 1800 (30 min); capped at 3600 (60 min).

Response

Minted a short-lived workspace service token.

Changes

No recorded changes to this operation across all 1 revision of this API.