From b708e7817a2d35ad84f889c48da50e0a60a7ba8b Mon Sep 17 00:00:00 2001
From: rami3l <rami3l@outlook.com>
Date: Mon, 17 Aug 2026 11:13:03 +0200
Subject: [PATCH] Add OIDC Debugger Action workflow

---
 .github/workflows/debug-oidc.yml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 .github/workflows/debug-oidc.yml

diff --git a/.github/workflows/debug-oidc.yml b/.github/workflows/debug-oidc.yml
new file mode 100644
index 0000000000..4f571ce79c
--- /dev/null
+++ b/.github/workflows/debug-oidc.yml
@@ -0,0 +1,20 @@
+name: Test Debugger Action
+on:
+  pull_request:
+  workflow_dispatch:
+
+jobs:
+  oidc_debug_test:
+    permissions:
+      contents: read
+      id-token: write
+    runs-on: ubuntu-latest
+    name: A test of the oidc debugger
+    steps:
+      - name: Show OIDC claims (right before assume)
+        env:
+          AUDIENCE: "sts.amazonaws.com"
+        run: |
+          TOKEN_JSON=$(curl -s -H "Authorization: bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" "$ACTIONS_ID_TOKEN_REQUEST_URL&audience=$AUDIENCE")
+          ID_TOKEN=$(echo "$TOKEN_JSON" | jq -r .value)
+          echo "$ID_TOKEN" | awk -F. '{print $2}' | base64 -d 2>/dev/null | jq -r