GitHub Actions OIDC Token Verifier

Verifies GitHub Actions OIDC tokens against the GitHub OIDC provider JWKS endpoint. Validates subject claims, audience restrictions, and repository ownership for secure cloud deployments.

Prerequisites

GitHub repository with Actions enabled

Installation

Use the upstream install or setup path that matches your environment:

• Docker to Azure App Service
• Use Docker service containers
• Make a contribution Learn how to contribute

Requirements and caveats from upstream:

• Deploy to third-party platforms Node.js to Azure App Service
• Python to Azure App Service
• Node.js

Basic usage or getting-started notes:

• Billing and usage

• Choose when workflows run Trigger a workflow

• Choose where workflows run Choose the runner for a job

• Source: https://docs.github.com/en/actions

Documentation

• https://docs.github.com/en/actions

Source

• Agent Skill Exchange