Security

OpenID Connect (OIDC)

An identity layer built on OAuth 2.0. In CI/CD it lets a workflow present a short-lived, verifiable token and exchange it for temporary cloud credentials, removing the need to store long-lived secrets.

Deep dive

Learn Article

Why Short-Lived Credentials Beat Rotating Secrets After a CI Breach

Rotation cleans up each leak; short-lived identity-based credentials make leaks cheap. OIDC, approval gates and egress control shrink what a stolen workflow can take.

intermediate 4 min read

Back to glossary