GitHub Actions without an API key: OIDC at FFxF
No more API key in the repository's secrets: GitHub Actions signs a five-minute token for each job, and FFxF accepts it when it matches your rules. Provider, binding, workflow and the real output of a demonstration.
Read the article 7 min read