GitHub Actions: Security Hardening With OpenID Connect

Thu, 06 Mar 2025 00:00:00 +0000

The easiest way to configure your CI/CD pipeline with AWS is to just create long-lived credentials, access and secret key, and store them in GitHub Actions.

While this method works, it has several security risks:

Openid Connect on Daniel Ancuta

GitHub Actions: Security Hardening With OpenID Connect