#oidc

GitHub Actions OIDC: Short-Lived Cloud Credentials Without Repository Secrets

How GitHub's OIDC tokens, cloud trust policies, audience and subject claims replace static CI keys while keeping workflows and environments constrained.