From 378bf771ba23ad9931decab9b53f695a987b2ebb Mon Sep 17 00:00:00 2001 From: Richard Cheney Date: Thu, 23 Jul 2026 14:45:51 +0100 Subject: [PATCH] immutable subject claim --- modules/github/locals.tf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/github/locals.tf b/modules/github/locals.tf index b8d5b9a7..14cb36b9 100644 --- a/modules/github/locals.tf +++ b/modules/github/locals.tf @@ -25,7 +25,7 @@ locals { { subject_key = "${key}-${environment_user_assigned_managed_identity_mapping.user_assigned_managed_identity_key}" user_assigned_managed_identity_key = environment_user_assigned_managed_identity_mapping.user_assigned_managed_identity_key - subject = "repo:${var.organization_name}/${var.repository_name}:environment:${var.environments[environment_user_assigned_managed_identity_mapping.environment_key]}:job_workflow_ref:${format(local.template_claim_structure, value.workflow_file_name)}" + subject = "repo:${var.organization_name}@${data.github_organization.alz.id}/${var.repository_name}@${github_repository.alz.repo_id}:environment:${var.environments[environment_user_assigned_managed_identity_mapping.environment_key]}:job_workflow_ref:${format(local.template_claim_structure, value.workflow_file_name)}" } ] ])