build1 publisher
OCI's Workload Identity Federation exchanges a GitHub OIDC token for a short-lived session
In a dev.to write-up, Jorge RN traces the chain from a workload's own identity to an ephemeral OCI session token, where the authorization decision reads claims such as repository, workflow and branch.
Publishers:dev.to
Reality
- Evidence30
- Adoption
- Insufficient
- Hype gap+25
- Incentives40
- Confidence35