digitalocean / digitalocean/action-doctl
Support GitHub OIDc/Workload Identity Federation
- Dominant language
- JavaScript
- Stars
- 520
- Forks
- 51
- PR merge metrics
- No merged PRs in 30d
Description
With the massive amount of supply chain attacks and compromised actions workflows as of late, it is becoming more and more indefensible to keep long lived (read: more than 10 minutes) API tokens around. Please add support for using GitHubs Actions OIDc issuer to obtain a short-lived token with a narrow set of scopes as an authentication method with this action
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reading the action-doctl authentication flow and GitHub Actions OIDC issuer documentation. Determine how short-lived tokens and narrowly scoped credentials should be obtained and used by the action; done means the action supports this authentication method without requiring long-lived API tokens.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions, javascript
- Domain
- authentication, ci-cd, cloud, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100