Oidc - 1

2026 (5)

April (3)

github: OIDC support for Dependabot and code scanning

GitHub

2026-04-14

Dependabot and code scanning now support OpenID Connect (OIDC) authentication for private registries configured at the organization level. This removes the need to store long-lived credentials as repository secrets.

github: npm trusted publishing now supports CircleCI

GitHub

2026-04-07

npm trusted publishing now supports CircleCI as an OIDC provider for publishing packages to npm. Maintainers can authenticate from CircleCI workflows without stored credentials, alongside existing support for GitHub Actions and GitLab CI/CD.

github: GitHub Actions: Early April 2026 updates

GitHub

2026-04-02

GitHub Actions added entrypoint and command overrides for service containers. The update also includes new security features: OIDC custom properties and VNET failover.

March (1)

k8s: Securing Production Debugging in Kubernetes

Kubernetes Official Blog

2026-03-18

The post recommends securing production Kubernetes debugging with least-privilege RBAC, short-lived identity-bound credentials, and a just-in-time access gateway instead of shared bastions, cluster-admin access, or long-lived SSH keys. It outlines practical patterns for namespace-scoped roles, group-based bindings, OIDC or client-certificate auth, and gateway-mediated sessions with audit logging and automatic expiration.

February (1)

github: npm bulk trusted publishing config and script security now generally available

GitHub

2026-02-18

npm CLI v11.10.0+ adds bulk management for OIDC trusted publishing configurations and makes a script security feature generally available.