Tag

workload-identity-federation

Safeguard articles tagged "workload-identity-federation" — guides, analysis, and best practices for software supply chain and application security.

2 articles

Identity Security

Workload identity federation

What is workload identity federation? A precise breakdown of keyless cloud authentication, GitHub Actions OIDC, and short-lived credentials replacing static API keys.

Mar 1, 20268 min read

Best Practices

GCP Workload Identity Federation: Supply Chain Uses

How to use GCP Workload Identity Federation to eliminate long-lived service account keys from your supply chain: GitHub Actions, GitLab CI, external builders, and the misconfigurations that silently undermine the design.

Jul 12, 20247 min read