Access-Control - 1

2025 (4)

November (2)

github: New GitHub Actions OIDC token claims

GitHub

2025-11-13

GitHub Actions OIDC tokens now include a check_run_id claim, allowing workflows to present a run-specific identifier to external services. This change enables more fine-grained attribute-based access control and improved auditability for integrations.

github: Required review by specific teams now available in rulesets

GitHub

2025-11-04

GitHub now lets repository administrators require approvals from specific teams to merge changes into protected branches using rulesets. You can target these team-based approval requirements to particular files and folders, giving finer-grained control over who must sign off on changes.

September (2)

azure: [In preview] Public Preview: Signed request on Azure Front Door

Azure Updates

2025-09-22

Microsoft announced the public preview of Azure Front Door 'signed request', a new capability to strengthen access control for content delivery by allowing organizations to restrict access to content such as media streams and files.

github: Delegated bypass controls for push protection now available at the enterprise level

GitHub

2025-09-16

GitHub now offers delegated bypass controls for push protection at the enterprise level. Administrators can choose who is allowed to bypass secret-scanning push protections and designate reviewers for bypass requests, centrally managing approvers to improve governance and reduce risk.