{"record":{"id":"c89e88ed96c7311c","repo":"BerriAI/litellm","slug":"github-oidc-provider-failed","errorCode":null,"errorMessage":"Github OIDC provider failed","messagePattern":"Github OIDC provider failed","errorType":"exception","errorClass":"ValueError","httpStatus":null,"severity":"error","filePath":"litellm/secret_managers/main.py","lineNumber":271,"sourceCode":"            oidc_token = oidc_cache.get_cache(key=secret_name)\n            if oidc_token is not None:\n                return oidc_token\n\n            oidc_client = _get_oidc_http_handler()\n            response = oidc_client.get(\n                actions_id_token_request_url,\n                params={\"audience\": oidc_aud},\n                headers={\n                    \"Authorization\": f\"Bearer {actions_id_token_request_token}\",\n                    \"Accept\": \"application/json; api-version=2.0\",\n                },\n            )\n            if response.status_code == 200:\n                oidc_token = response.json().get(\"value\", None)\n                oidc_cache.set_cache(key=secret_name, value=oidc_token, ttl=300 - 5)\n                return oidc_token\n            else:\n                raise ValueError(\"Github OIDC provider failed\")\n        elif oidc_provider == \"azure\":\n            # https://azure.github.io/azure-workload-identity/docs/quick-start.html\n            azure_federated_token_file: Final = os.getenv(\"AZURE_FEDERATED_TOKEN_FILE\")\n            if azure_federated_token_file is None:\n                verbose_logger.warning(\n                    \"AZURE_FEDERATED_TOKEN_FILE not found in environment will use Azure AD token provider\"\n                )\n                azure_token_provider: Final = get_azure_ad_token_provider(azure_scope=oidc_aud)\n                try:\n                    oidc_token = azure_token_provider()\n                    if oidc_token is None:\n                        raise ValueError(\"Azure OIDC provider returned None token\")\n                    return oidc_token\n                except Exception as e:\n                    error_msg: Final = f\"Azure OIDC provider failed: {e}\"\n                    verbose_logger.error(error_msg)\n                    raise ValueError(error_msg)\n            with open(azure_federated_token_file, \"r\") as f:","sourceCodeStart":253,"sourceCodeEnd":289,"githubUrl":"https://github.com/BerriAI/litellm/blob/77b7c6c40c0c5aa5fbcb1d6a1825ac39ca8829b8/litellm/secret_managers/main.py#L253-L289","documentation":"OIDC resolution failure for the 'github' provider: the request to the GitHub Actions token endpoint (actions_id_token_request_url with audience) returned a non-200 response — invalid request token or audience — so no OIDC token is available.","triggerScenarios":"Thrown at litellm/secret_managers/main.py:271 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Check the HTTP status/body from the GitHub OIDC token endpoint and the requested audience.","Confirm id-token: write permission and that the request token has not expired."],"exampleFix":null,"handlingStrategy":"try-catch","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"77b7c6c40c0c5aa5fbcb1d6a1825ac39ca8829b8","analyzedAt":"2026-08-18T11:44:31.656Z","contentChangedAt":null,"schemaVersion":2},"datasetVersion":"2026-09-14T00:17:10.932Z"}