Using OIDC With HashiCorp Vault and GitHub Actions

In this talk, you'll learn how to set up Vault as an OIDC provider, configure dynamic cloud credentials, and use them in GitHub Actions. More guides on Vault OIDC → developer.hashicorp.com/vault...
Storing static security credentials in your GitHub secrets is a practice fraught with peril. Static credentials can expire, be leaked, and need to be updated manually. Instead of using static credentials, why not leverage the OIDC provider for HashiCorp Vault to dynamically generate short-lived credentials for your GitHub Actions workflow?
Speaker: Ned Bellavance
Subscribe to our KZbin Channel → kzbin.info?s...
For hands-on interactive labs, visit HashiCorp Learn → learn.hashicorp.com/
HashiCorp provides infrastructure automation software for multi-cloud environments, enabling enterprises to unlock a common cloud operating model to provision, secure, connect, and run any application on any infrastructure. HashiCorp open source tools Vagrant, Packer, Terraform, Vault, Consul, Nomad, Boundary, and Waypoint allow organizations to deliver applications faster by helping enterprises transition from manual processes and ITIL practices to self-service automation and DevOps practices.
For more information → hashicorp.com
Twitter → / hashicorp
LinkedIn → / hashicorp
Facebook → / hashicorp
#OIDC #HashiCorpVault #AppSec #InfoSec

[@user-sh1qs8jv6y]

Great talk, enjoyed it very much. Good pointers for troubleshooting as well.