hyperlight-dev / hyperlight-dev/hyperlight
Update OIDC configuration to use immutable claims in GH actions
Open
area/security
lifecycle/needs-review
- Dominant language
- Rust
- Stars
- 4.7k
- Forks
- 208
- Avg merge
- 1d 7h
- Merged PRs (30d)
- 47
Description
see https://docs.github.com/en/actions/reference/security/oidc#immutable-subject-claims
Contributor guide
Research direction
Start by locating the GitHub Actions workflow configuration and compare its OIDC settings with the linked GitHub documentation on immutable subject claims. Update the relevant configuration so it uses immutable claims, then verify the workflows still validate and authenticate as expected.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions
- Domain
- ci-cd, security
- Issue type
- Refactor
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Active
- Clarity
- Needs clarification
- Newbie friendliness
- 45/100