Skip to content
ezoidc

Buildkite

To validate Buildkite ID Tokens, add the buildkite issuer to the server’s configuration.

config.yaml
issuers:
  buildkite:
    issuer: https://agent.buildkite.com
    jwks_uri: https://agent.buildkite.com/.well-known/jwks

Claims

policy.rego
claims.sub = "organization:acme-inc:pipeline:super-duper-app:ref:refs/heads/main:commit:9f3182061f1e2cca4702c368cbc039b7dc9d4485:step:build"
claims.organization_slug = "acme-inc"
claims.pipeline_slug = "super-duper-app"
claims.build_number = 1
claims.build_branch = "main"
claims.build_commit = "9f3182061f1e2cca4702c368cbc039b7dc9d4485"
claims.step_key = "build"
claims.job_id = "0184990a-477b-4fa8-9968-496074483cee"
claims.agent_id = "0184990a-4782-42b5-afc1-16715b10b8ff"

References