Prompt Buddy logoPrompt Buddy

github · GitHub Actions Docs

Actions Using OpenID Connect with reusable workflows - GitHub Docs

Configures OpenID Connect (OIDC) authentication to allow reusable workflows to securely access cloud providers or external services without using long-lived secrets.

Import to Prompt Buddy

Derived skill

Files assembled from official documentation

Viewing SKILL.md

Actions Using OpenID Connect with reusable workflows - GitHub Docs

Configures OpenID Connect (OIDC) authentication to allow reusable workflows to securely access cloud providers or external services without using long-lived secrets.

When To Use

Use when you need to implement secure, secretless authentication for reusable GitHub Actions workflows connecting to cloud platforms like AWS, Azure, or Google Cloud.

Reference Files

FileContainsUse For
SKILL.mdEntry point: scope, routing table, and workflow.Start here.
docs/actions-how-tos-secure-your-work-using-openid-connect-with-reusable-work-workflow-guide.mdA guide explaining how to use OpenID Connect to secure deployments when using reusable workflows in GitHub Actions.Questions about a guide explaining how to use OpenID Connect to secure deployments when using reusable workflows in GitHub Actions.
examples/actions-how-tos-secure-your-work-using-openid-connect-with-reusable-work.textA JSON representation of a JWT payload used for OpenID Connect authentication within GitHub Actions reusable workflows.Exact payloads, commands, or snippets shown in A JSON representation of a JWT payload used for OpenID Connect authentication within GitHub Actions reusable workflows.

What This Skill Covers

    • GitHub Actions / - How-tos / - Secure your work / - Security harden deployments / - OIDC with reusable workflows
  • Main sections: In this article, About reusable workflows, Defining the trust conditions, How the token works with reusable workflows, Examples.

Workflow

  1. Open the most relevant file under docs/ for the exact documented workflow and wording.
  2. Open schemas/ files for exact structured contracts.
  3. Open examples/ files for concrete requests, commands, snippets, and manifests.
  4. Do not add behavior or configuration that is not present in the attached source files.

Canonical source: https://docs.github.com/en/actions/how-tos/secure-your-work/security-harden-deployments/oidc-with-reusable-workflows