Restrict certificate provision based on token data

[slavb18]

I have question about github action from https://smallstep.com/blog/github-actions-oidc-tls-credentials/

How can I restrict certitificate based on .Token.repository_owner ?

E.g. I want to limit github orgs which can request ceritficate from my CA

[slavb18]

Found solution by myself

{{- if has .Token.repository_owner (list "org1" "org2") }}
...
{{- else }}
  {{ fail "Forbidden Org" }}
{{- end }}