github · GitHub Actions Docs
Actions Configuring OpenID Connect in cloud providers - GitHub Docs
Configures OpenID Connect (OIDC) to establish trust between GitHub Actions and various cloud providers to enable passwordless authentication.
Derived skill
Files assembled from official documentation
Viewing SKILL.md
Actions Configuring OpenID Connect in cloud providers - GitHub Docs
Configures OpenID Connect (OIDC) to establish trust between GitHub Actions and various cloud providers to enable passwordless authentication.
When To Use
Use when you need to configure secure, secretless authentication between GitHub Actions workflows and cloud platforms like AWS, Azure, Google Cloud, or HashiCorp Vault.
Reference Files
| File | Contains | Use For |
|---|---|---|
SKILL.md | Entry point: scope, routing table, and workflow. | Start here. |
docs/actions-how-tos-secure-your-work-configuring-openid-connect-in-cloud-pro-workflow-guide.md | A guide explaining how to configure OpenID Connect (OIDC) to allow GitHub Actions to authenticate with cloud providers without using long-lived secrets. | Questions about a guide explaining how to configure OpenID Connect (OIDC) to allow GitHub Actions to authenticate with cloud provider... |
examples/actions-how-tos-secure-your-work-configuring-openid-connect-in-cloud-pro.text | A GitHub Actions workflow step using github-script to retrieve an OIDC ID token via the @actions/core package. | Exact payloads, commands, or snippets shown in A GitHub Actions workflow step using github-script to retrieve an OIDC ID token via the @actions/core package. |
examples/actions-how-tos-secure-your-work-configuring-openid-connect-in-cloud-pro-2.text | A GitHub Actions workflow step using actions/github-script to retrieve and output the OIDC ID token and request URL from environment variables. | Exact payloads, commands, or snippets shown in A GitHub Actions workflow step using actions/github-script to retrieve and output the OIDC ID token and request URL f... |
examples/actions-how-tos-secure-your-work-configuring-openid-connect-in-cloud-pro-3.text | A shell script snippet demonstrating how to use curl and jq to extract an OIDC ID token from the GitHub Actions identity provider endpoint. | Exact payloads, commands, or snippets shown in A shell script snippet demonstrating how to use curl and jq to extract an OIDC ID token from the GitHub Actions ident... |
What This Skill Covers
-
- GitHub Actions / - How-tos / - Secure your work / - Security harden deployments / - OIDC in cloud providers
- Main sections:
In this article,Overview,Prerequisites,Updating your GitHub Actions workflow,Adding permissions settings.
Workflow
- Open the most relevant file under
docs/for the exact documented workflow and wording. - Open
schemas/files for exact structured contracts. - Open
examples/files for concrete requests, commands, snippets, and manifests. - Do not add behavior or configuration that is not present in the attached source files.
Canonical source: https://docs.github.com/en/actions/how-tos/secure-your-work/security-harden-deployments/oidc-in-cloud-providers
