digitalocean / digitalocean/action-doctl

Support GitHub OIDc/Workload Identity Federation

Open
#138 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
520
Forks
51
PR merge metrics
No merged PRs in 30d

Description

With the massive amount of supply chain attacks and compromised actions workflows as of late, it is becoming more and more indefensible to keep long lived (read: more than 10 minutes) API tokens around. Please add support for using GitHubs Actions OIDc issuer to obtain a short-lived token with a narrow set of scopes as an authentication method with this action

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reading the action-doctl authentication flow and GitHub Actions OIDC issuer documentation. Determine how short-lived tokens and narrowly scoped credentials should be obtained and used by the action; done means the action supports this authentication method without requiring long-lived API tokens.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions, javascript
Domain
authentication, ci-cd, cloud, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.