fix: Prevent duplicate GitHub thumbprints (#32)

unfunco · Jun 28, 2023 · 35f725d · 35f725d
1 parent 52b5db3
commit 35f725d
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/main.tf b/main.tf
@@ -71,8 +71,10 @@ resource "aws_iam_openid_connect_provider" "github" {
 
   tags = var.tags
   url  = "https://token.actions.githubusercontent.com%{if var.enterprise_slug != ""}/${var.enterprise_slug}%{endif}"
-  thumbprint_list = var.additional_thumbprints != null ? concat(
-    [data.tls_certificate.github.certificates[0].sha1_fingerprint],
-    [for thumbprint in var.additional_thumbprints : thumbprint]
+  thumbprint_list = var.additional_thumbprints != null ? distinct(
+    concat(
+      [data.tls_certificate.github.certificates[0].sha1_fingerprint],
+      [for thumbprint in var.additional_thumbprints : thumbprint]
+    )
   ) : [data.tls_certificate.github.certificates[0].sha1_fingerprint]
 }