GitHub Actions OIDC Token Verifier
Verifies GitHub Actions OIDC tokens against the GitHub OIDC provider JWKS endpoint. Validates subject claims, audience restrictions, and repository ownership for secure cloud deployments.
Prerequisites
GitHub repository with Actions enabled
Installation
Use the upstream install or setup path that matches your environment:
- Docker to Azure App Service
- Use Docker service containers
- Make a contribution Learn how to contribute
Requirements and caveats from upstream:
- Deploy to third-party platforms Node.js to Azure App Service
- Python to Azure App Service
- Node.js
Basic usage or getting-started notes:
Billing and usage
Choose when workflows run Trigger a workflow
Choose where workflows run Choose the runner for a job