websight-io / starter

Sample project built on top of the Websight CMS
https://www.websight.io
Apache License 2.0
58 stars 7 forks source link

Use OCID provider for GH Actions GCP authentication #201

Closed tomaszmichalak closed 1 year ago

tomaszmichalak commented 1 year ago

Secure GCP authentication with OAuth strategy.

Description

We stored JSON token with service user credentials before. We use OAuth approach now. More details here: https://github.com/google-github-actions/auth#setting-up-workload-identity-federation

Motivation and Context

Security concerns.

Types of changes

Checklist:

github-actions[bot] commented 1 year ago

✅ Visual tests status

No visual changes detected.

Name Link
Commit 60e6ee8369e4502286dff9df4c1b87aa28430825
Logs https://github.com/websight-io/starter/actions/runs/6573191978
github-actions[bot] commented 1 year ago

✅ Visual tests status

No visual changes detected.

Name Link
Commit 379368035061ceb8d19c1ed4fa0bc00d7a95981e
Logs https://github.com/websight-io/starter/actions/runs/6573551850