Can GitHub provision OIDC tokens in Codespaces VMs? like they do in GitHub Action VMs?

[Oded-B]

Select Topic Area

Question

Body

In GH Actions you can use OIDC tokens to authenticate to other SAAS services.
But that mechanism seems specific to Actions, like setting the permissions:

permissions:
  id-token:

And more.

Is there a way get such a token in Codespaces? a token that is signed by a public issuer (like https://token.actions.githubusercontent.com).

This is the use-case:
A user start a Codespaces VM in attached to a repo that host Terraform code, we wants to run a "plan" so he needs credentials to some cloud vendor.

There some mention of this in https://github.com/orgs/community/discussions/5668 but that discussion stalled

[robin-thoni]

There is GITHUB_TOKEN available in Codespaces, but I don't think it's usable in anything else than GH API :/

Would be a great feature, IMHO