From 35f725d4448b6838afd5b9e95ca793f7d4988665 Mon Sep 17 00:00:00 2001 From: Witold Duranek Date: Wed, 28 Jun 2023 14:03:24 +0200 Subject: [PATCH] fix: Prevent duplicate GitHub thumbprints (#32) --- main.tf | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/main.tf b/main.tf index 193cfbd..e6974e2 100644 --- a/main.tf +++ b/main.tf @@ -71,8 +71,10 @@ resource "aws_iam_openid_connect_provider" "github" { tags = var.tags url = "https://token.actions.githubusercontent.com%{if var.enterprise_slug != ""}/${var.enterprise_slug}%{endif}" - thumbprint_list = var.additional_thumbprints != null ? concat( - [data.tls_certificate.github.certificates[0].sha1_fingerprint], - [for thumbprint in var.additional_thumbprints : thumbprint] + thumbprint_list = var.additional_thumbprints != null ? distinct( + concat( + [data.tls_certificate.github.certificates[0].sha1_fingerprint], + [for thumbprint in var.additional_thumbprints : thumbprint] + ) ) : [data.tls_certificate.github.certificates[0].sha1_fingerprint] }