OIDC - 1

2026 (4)

March (1)

k8s: Securing Production Debugging in Kubernetes

Kubernetes Official Blog

2026-03-18

The post recommends securing production Kubernetes debugging with least-privilege RBAC, short-lived identity-bound credentials, and a just-in-time access gateway instead of shared bastions, cluster-admin access, or long-lived SSH keys. It outlines practical patterns for namespace-scoped roles, group-based bindings, OIDC or client-certificate auth, and gateway-mediated sessions with audit logging and automatic expiration.

February (2)

github: npm bulk trusted publishing config and script security now generally available

GitHub

2026-02-18

npm CLI v11.10.0+ adds bulk management for OIDC trusted publishing configurations and makes a script security feature generally available.

github: Dependabot now supports OIDC authentication

GitHub

2026-02-03

GitHub Dependabot can now authenticate to private registries using OpenID Connect (OIDC), removing the need to store long-lived registry credentials as repository secrets for Dependabot update jobs.

January (1)

k8s: Headlamp in 2025: Project Highlights

Kubernetes Official Blog

2026-01-22

Headlamp’s 2025 recap highlights major growth: the project joined Kubernetes SIG UI, absorbed many community contributions via the Linux Foundation mentorship, and shipped several UX and platform features — multi-cluster views, Projects for grouping resources, a taskbar/activities model, improved search and map, OIDC/auth improvements, Helm/App Catalog enhancements, plugin ecosystem growth (including an AI Assistant), and performance, accessibility, and security upgrades.

2025 (1)

November (1)

github: New GitHub Actions OIDC token claims

GitHub

2025-11-13

GitHub Actions OIDC tokens now include a check_run_id claim, allowing workflows to present a run-specific identifier to external services. This change enables more fine-grained attribute-based access control and improved auditability for integrations.