GitHub Actions OIDC Token Validator

Validates GitHub Actions OIDC tokens for secure, secretless deployments. Uses the GitHub Actions id-token API and the jose JWT library to verify audience, issuer, and subject claims. Integrates with AWS STS AssumeRoleWithWebIdentity and GCP Workload Identity Federation for cloud access.

agentskillexchange Updated 28 repo stars

File contents

GitHub Actions OIDC Token Validator

Validates GitHub Actions OIDC tokens for secure, secretless deployments. Uses the GitHub Actions id-token API and the jose JWT library to verify audience, issuer, and subject claims. Integrates with AWS STS AssumeRoleWithWebIdentity and GCP Workload Identity Federation for cloud access.

Prerequisites

GitHub repository with Actions enabled

Installation

Use the upstream install or setup path that matches your environment:

  • Docker to Azure App Service
  • Use Docker service containers
  • Make a contribution Learn how to contribute

Requirements and caveats from upstream:

  • Deploy to third-party platforms Node.js to Azure App Service
  • Python to Azure App Service
  • Node.js

Basic usage or getting-started notes:

Documentation

Source

agentskillexchange/skills/tree/main/skills/github-actions-oidc-token-validator commit c55e00502c

Frequently asked questions

npx skillmds@latest add agentskillexchange/github-actions-oidc-token-validator