Id Token Google Cloud Build

gistfile1.txt

- name: gcr.io/cloud-builders/gcloud
  entrypoint: "bash"
  args:
    - "-c"
    - |
      apt update && apt install jq -y
      curl -X POST -H "content-type: application/json" \
        -H "Authorization: Bearer $(gcloud auth print-access-token)" \
        -d '{"audience": "dexinapp"}' \
        "https://iamcredentials.googleapis.com/v1/projects/-/serviceAccounts/___SERVICE_ACCOUNT_EMAIL___:generateIdToken" | jq -r .token > /workspace/token.txt