github · GitHub Actions Docs
Actions OpenID Connect reference - GitHub Docs
Explains how to use OpenID Connect (OIDC) to authenticate GitHub Actions with cloud providers like AWS, Azure, Google Cloud, and HashiCorp Vault without using long-lived secrets.
Derived skill
Files assembled from official documentation
Viewing SKILL.md
Actions OpenID Connect reference - GitHub Docs
Explains how to use OpenID Connect (OIDC) to authenticate GitHub Actions with cloud providers like AWS, Azure, Google Cloud, and HashiCorp Vault without using long-lived secrets.
When To Use
Use when configuring GitHub Actions to securely access cloud resources like AWS, Azure, or GCP without storing permanent credentials in GitHub secrets.
Reference Files
| File | Contains | Use For |
|---|---|---|
SKILL.md | Entry point: scope, routing table, and workflow. | Start here. |
docs/actions-security-oidc-openid-connect-reference-github-docs-workflow-guide.md | A reference guide detailing OIDC token claims, standard audience, issuer, and subject claims for GitHub Actions authentication. | Questions about a reference guide detailing OIDC token claims, standard audience, issuer, and subject claims for GitHub Actions authe... |
examples/actions-security-oidc-openid-connect-reference-github-docs-github-action.text | A text representation of the GitHub Actions OpenID Connect reference configuration structure. | Exact payloads, commands, or snippets shown in A text representation of the GitHub Actions OpenID Connect reference configuration structure. |
examples/actions-security-oidc-openid-connect-reference-github-docs-github-action-2.text | A JSON object illustrating the structure of OIDC claims issued by GitHub Actions for identity verification. | Exact payloads, commands, or snippets shown in A JSON object illustrating the structure of OIDC claims issued by GitHub Actions for identity verification. |
examples/actions-security-oidc-openid-connect-reference-github-docs-github-action-3.text | A text representation of the available claims and configuration options for GitHub Actions OpenID Connect authentication. | Exact payloads, commands, or snippets shown in A text representation of the available claims and configuration options for GitHub Actions OpenID Connect authenticat... |
examples/actions-security-oidc-openid-connect-reference-github-docs-github-action-4.text | A text representation of the available claims and configuration options for GitHub Actions OpenID Connect authentication. | Exact payloads, commands, or snippets shown in A text representation of the available claims and configuration options for GitHub Actions OpenID Connect authenticat... |
examples/actions-security-oidc-openid-connect-reference-github-docs-github-action-5.text | A text reference listing the available claims and keys available in the GitHub Actions OpenID Connect token. | Exact payloads, commands, or snippets shown in A text reference listing the available claims and keys available in the GitHub Actions OpenID Connect token. |
examples/actions-security-oidc-openid-connect-reference-github-docs-github-action-6.text | A text representation of the available claims and configuration options for GitHub Actions OpenID Connect authentication. | Exact payloads, commands, or snippets shown in A text representation of the available claims and configuration options for GitHub Actions OpenID Connect authenticat... |
examples/actions-security-oidc-openid-connect-reference-github-docs-github-action-7.text | A text representation of the available claims and configuration options for GitHub Actions OpenID Connect authentication. | Exact payloads, commands, or snippets shown in A text representation of the available claims and configuration options for GitHub Actions OpenID Connect authenticat... |
examples/actions-security-oidc-openid-connect-reference-github-docs-github-action-8.text | A text representation of the available claims and configuration options for GitHub Actions OpenID Connect authentication. | Exact payloads, commands, or snippets shown in A text representation of the available claims and configuration options for GitHub Actions OpenID Connect authenticat... |
examples/actions-security-oidc-openid-connect-reference-github-docs-github-action-9.text | A text representation of the available claims and configuration options for GitHub Actions OpenID Connect authentication. | Exact payloads, commands, or snippets shown in A text representation of the available claims and configuration options for GitHub Actions OpenID Connect authenticat... |
examples/actions-security-oidc-openid-connect-reference-github-docs-github-action-10.text | A text representation of the available claims and configuration options for GitHub Actions OpenID Connect authentication. | Exact payloads, commands, or snippets shown in A text representation of the available claims and configuration options for GitHub Actions OpenID Connect authenticat... |
examples/actions-security-oidc-openid-connect-reference-github-docs-github-action-11.text | A text representation of the available claims and configuration options for GitHub Actions OpenID Connect authentication. | Exact payloads, commands, or snippets shown in A text representation of the available claims and configuration options for GitHub Actions OpenID Connect authenticat... |
examples/actions-security-oidc-openid-connect-reference-github-docs-github-action-12.text | A text representation of the available claims and configuration options for GitHub Actions OpenID Connect authentication. | Exact payloads, commands, or snippets shown in A text representation of the available claims and configuration options for GitHub Actions OpenID Connect authenticat... |
examples/actions-security-oidc-openid-connect-reference-github-docs-github-action-13.text | A text-based configuration reference for implementing OpenID Connect in GitHub Actions. | Exact payloads, commands, or snippets shown in A text-based configuration reference for implementing OpenID Connect in GitHub Actions. |
examples/actions-security-oidc-openid-connect-reference-github-docs-github-action-14.text | A text-based reference configuration for implementing OpenID Connect in GitHub Actions. | Exact payloads, commands, or snippets shown in A text-based reference configuration for implementing OpenID Connect in GitHub Actions. |
examples/actions-security-oidc-openid-connect-reference-github-docs-github-action-15.text | A text snippet demonstrating the required permissions configuration for using OpenID Connect in GitHub Actions. | Exact payloads, commands, or snippets shown in A text snippet demonstrating the required permissions configuration for using OpenID Connect in GitHub Actions. |
examples/actions-security-oidc-openid-connect-reference-github-docs-github-action-16.text | A YAML configuration snippet demonstrating the required permissions for requesting a JWT in GitHub Actions. | Exact payloads, commands, or snippets shown in A YAML configuration snippet demonstrating the required permissions for requesting a JWT in GitHub Actions. |
examples/actions-security-oidc-openid-connect-reference-github-docs-github-action-17.text | A text snippet demonstrating the required permissions configuration for requesting a JWT in GitHub Actions using OpenID Connect. | Exact payloads, commands, or snippets shown in A text snippet demonstrating the required permissions configuration for requesting a JWT in GitHub Actions using Open... |
examples/actions-security-oidc-openid-connect-reference-github-docs-github-action-18.text | A curl command demonstrating how to request an OIDC ID token from the GitHub Actions token service using a bearer token and audience parameter. | Exact payloads, commands, or snippets shown in A curl command demonstrating how to request an OIDC ID token from the GitHub Actions token service using a bearer tok... |
What This Skill Covers
-
- GitHub Actions / - Reference / - Security / - OIDC
- Main sections:
In this article,OIDC token claims,Standard audience, issuer, and subject claims,Additional standard JOSE header parameters and claims,Custom claims provided by GitHub.
Workflow
- Open the most relevant file under
docs/for the exact documented workflow and wording. - Open
schemas/files for exact structured contracts. - Open
examples/files for concrete requests, commands, snippets, and manifests. - Do not add behavior or configuration that is not present in the attached source files.
Canonical source: https://docs.github.com/en/actions/reference/security/oidc