Tag
oidc
- Jan 8, 2026 Federating Workloads with OIDC: Which Claims a Trust Policy Must Pin How a workload proves its identity with a signed token instead of a secret, why audience and subject both need pinning, and where claim matching goes wrong. cloud infrastructure
- Jan 24, 2023 Keyless Signing and Transparency Logs for Build Artifacts Short-lived certificates bound to an OIDC identity remove long-lived keys from the signing path, and an append-only log makes a signature public evidence rather than a private promise. security