Oidc - 1

2026 (7)

April (3)

github: OIDC support for Dependabot and code scanning

GitHub

2026-04-14

Dependabot and code scanning now support OpenID Connect (OIDC) authentication for private registries configured at the organization level. This removes the need to store long-lived credentials as repository secrets.

github: npm trusted publishing now supports CircleCI

GitHub

2026-04-07

npm trusted publishing now supports CircleCI as an OIDC provider for publishing packages to npm. Maintainers can authenticate from CircleCI workflows without stored credentials, alongside existing support for GitHub Actions and GitLab CI/CD.

github: GitHub Actions: Early April 2026 updates

GitHub

2026-04-02

GitHub Actions added entrypoint and command overrides for service containers. The update also includes new security features: OIDC custom properties and VNET failover.

March (1)

k8s: Securing Production Debugging in Kubernetes

Kubernetes Official Blog

2026-03-18

The post recommends securing production Kubernetes debugging with least-privilege RBAC, short-lived identity-bound credentials, and a just-in-time access gateway instead of shared bastions, cluster-admin access, or long-lived SSH keys. It outlines practical patterns for namespace-scoped roles, group-based bindings, OIDC or client-certificate auth, and gateway-mediated sessions with audit logging and automatic expiration.

February (2)

github: npm bulk trusted publishing config and script security now generally available

GitHub

2026-02-18

npm CLI v11.10.0+ adds bulk management for OIDC trusted publishing configurations and makes a script security feature generally available.

github: Dependabot now supports OIDC authentication

GitHub

2026-02-03

GitHub Dependabot can now authenticate to private registries using OpenID Connect (OIDC), removing the need to store long-lived registry credentials as repository secrets for Dependabot update jobs.

January (1)

k8s: Headlamp in 2025: Project Highlights

Kubernetes Official Blog

2026-01-22

Headlamp’s 2025 recap highlights major growth: the project joined Kubernetes SIG UI, absorbed many community contributions via the Linux Foundation mentorship, and shipped several UX and platform features — multi-cluster views, Projects for grouping resources, a taskbar/activities model, improved search and map, OIDC/auth improvements, Helm/App Catalog enhancements, plugin ecosystem growth (including an AI Assistant), and performance, accessibility, and security upgrades.

2025 (1)

November (1)

github: New GitHub Actions OIDC token claims

GitHub

2025-11-13

GitHub Actions OIDC tokens now include a check_run_id claim, allowing workflows to present a run-specific identifier to external services. This change enables more fine-grained attribute-based access control and improved auditability for integrations.