{"post":{"id":"663bba29eb391352fd19c7b0","_id":"663bba29eb391352fd19c7b0","coverImage":{"isPortrait":false,"url":"https://cdn.hashnode.com/res/hashnode/image/stock/unsplash/mT7lXZPjk7U/upload/33e02a338b9f1ca186c05b98775dc107.jpeg","__typename":"PostCoverImage"},"slug":"securing-cicd-pipelines-with-oidc-github-actions-and-terraform","readTime":4,"replyCount":0,"responseCount":6,"brief":"In regulated industries, where trust is paramount, the security of CI/CD pipelines is a non-negotiable priority. Breaches within these pipelines can expose sensitive customer data and disrupt critical services, leading to devastating consequences. Tr...","subtitle":null,"isFeatured":true,"contributors":[{"_id":"6238983d6ac82a57d1f1f118","name":"Akash Moradiya","photo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1720239865049/aBYUcs7HN.jpeg","username":"akash3444","__typename":"User"},{"_id":"6244c627b4e1ecee678b5d41","name":"/dev/null","photo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1648674345157/S4sKQX7dN.png","username":"devnullroot","__typename":"User"},{"_id":"63ca50d0587fc59d3cd728ae","name":"Alexander Panov","photo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1684160213700/sV5HlET6_.jpg","username":"IJustDev","__typename":"User"},{"_id":"663dfd603f0f4da461443d9e","name":"Arjun Raj","photo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1715338592724/736d63fc-0e7c-4b8a-a4fe-e70b0bca8829.png","username":"arjun576","__typename":"User"},{"_id":"664292be61fb4d1b6c83736f","name":"Emilla Filipowicz","photo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1715644125182/5d9bb17c-dade-4e6f-b2b7-85633acb831a.jpeg","username":"emillafilipowicz","__typename":"User"}],"bookmarked":false,"views":475,"url":"https://alantai.hashnode.dev/securing-cicd-pipelines-with-oidc-github-actions-and-terraform","totalReactions":35,"title":"Securing CI/CD pipelines with OIDC, GitHub Actions, and Terraform","dateAdded":"2024-05-08T17:45:13.134Z","cuid":"clvy40zou000a09jpaqhh9rvq","preferences":{"disableComments":false,"__typename":"PostPreferences"},"__typename":"Post","seo":{"title":null,"description":null,"__typename":"SEO"},"ogMetaData":{"image":null,"__typename":"OpenGraphMetaData"},"author":{"_id":"6531408c4dc40b627530c707","name":"Alan Tai","photo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1697726604130/474c375e-71c9-4148-9248-c182f056eebb.jpeg","isPro":false,"username":"alantai","__typename":"User","tagline":"Architecting solutions with people in mind"},"coAuthors":[],"series":null,"tags":[{"_id":"57bf546693309a25047c6206","logo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1617121672721/6r0bN-GSK.png","name":"Terraform","slug":"terraform","__typename":"Tag"},{"_id":"5f58b30bffbb8f35dd030b06","logo":null,"name":"#IaC","slug":"iac","__typename":"Tag"},{"_id":"56744721958ef13879b94bc5","logo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1607508501076/CYQAUOwqq.png","name":"AWS","slug":"aws","__typename":"Tag"},{"_id":"5e47157b8c89a92316cd1ffc","logo":null,"name":"OIDC","slug":"oidc","__typename":"Tag"},{"_id":"5de904f728ad6cb23d57019d","logo":null,"name":"GitHub Actions","slug":"github-actions","__typename":"Tag"}],"publication":{"_id":"65561fe1ee20be49e83618fd","url":"https://alantai.hashnode.dev","canonicalURL":"https://alantai.hashnode.dev","title":"Because it matters","displayTitle":"Making things happen, making things right, because it matters - Alan Tai's blog","isHeadless":false,"favicon":null,"headerColor":"#352F44","metaTags":"","isTeam":false,"domainInfo":{"hashnodeSubdomain":"alantai","domain":null,"__typename":"DomainInfo"},"urlPattern":"SIMPLE","__typename":"Publication"},"comments":{"edges":[{"node":{"id":"663cc250636cfac477dc0e2f","author":{"_id":"63ca50d0587fc59d3cd728ae","name":"Alexander Panov","photo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1684160213700/sV5HlET6_.jpg","isPro":false,"username":"IJustDev","__typename":"User"},"content":{"html":"

Great post! How often I see the credentials inside a .yml file haha. With this post there are no excuses anymore

\n","markdown":"Great post! How often I see the credentials inside a .yml file haha. With this post there are no excuses anymore","text":"Great post! How often I see the credentials inside a .yml file haha. With this post there are no excuses anymore\n","__typename":"Content"},"dateAdded":"2024-05-09T12:32:16.217Z","stamp":"clvz8adzs05f21invfww0dfho","totalReactions":0,"__typename":"Comment","replies":{"edges":[],"pageInfo":{"hasNextPage":false,"endCursor":null,"__typename":"PageInfo"},"__typename":"CommentReplyConnection"}},"__typename":"PostCommentEdge"},{"node":{"id":"663cef547aa2212ac4937585","author":{"_id":"6244c627b4e1ecee678b5d41","name":"/dev/null","photo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1648674345157/S4sKQX7dN.png","isPro":false,"username":"devnullroot","__typename":"User"},"content":{"html":"

Very useful post. Real life applicable

\n","markdown":"Very useful post. Real life applicable","text":"Very useful post. Real life applicable\n","__typename":"Content"},"dateAdded":"2024-05-09T15:44:20.490Z","stamp":"clvzf5e6g00n3ounvg71chsrq","totalReactions":0,"__typename":"Comment","replies":{"edges":[],"pageInfo":{"hasNextPage":false,"endCursor":null,"__typename":"PageInfo"},"__typename":"CommentReplyConnection"}},"__typename":"PostCommentEdge"},{"node":{"id":"663dfda157eae584c5ad530d","author":{"_id":"663dfd603f0f4da461443d9e","name":"Arjun Raj","photo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1715338592724/736d63fc-0e7c-4b8a-a4fe-e70b0bca8829.png","isPro":false,"username":"arjun576","__typename":"User"},"content":{"html":"

\n","markdown":"hi","text":"hi\n","__typename":"Content"},"dateAdded":"2024-05-10T10:57:37.373Z","stamp":"clw0kciu5000709l9gmxz9v59","totalReactions":0,"__typename":"Comment","replies":{"edges":[],"pageInfo":{"hasNextPage":false,"endCursor":null,"__typename":"PageInfo"},"__typename":"CommentReplyConnection"}},"__typename":"PostCommentEdge"},{"node":{"id":"663e469b12dc36e7d39b1a57","author":{"_id":"6238983d6ac82a57d1f1f118","name":"Akash Moradiya","photo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1720239865049/aBYUcs7HN.jpeg","isPro":false,"username":"akash3444","__typename":"User"},"content":{"html":"

Nice

\n","markdown":"Nice","text":"Nice\n","__typename":"Content"},"dateAdded":"2024-05-10T16:08:59.480Z","stamp":"clw0vgy1k00040ala0z0t5e5r","totalReactions":0,"__typename":"Comment","replies":{"edges":[],"pageInfo":{"hasNextPage":false,"endCursor":null,"__typename":"PageInfo"},"__typename":"CommentReplyConnection"}},"__typename":"PostCommentEdge"},{"node":{"id":"663e471da96bad2ac46b3b1d","author":{"_id":"6238983d6ac82a57d1f1f118","name":"Akash Moradiya","photo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1720239865049/aBYUcs7HN.jpeg","isPro":false,"username":"akash3444","__typename":"User"},"content":{"html":"

Great

\n","markdown":"Great","text":"Great\n","__typename":"Content"},"dateAdded":"2024-05-10T16:11:09.893Z","stamp":"clw0vjqo5000009jye82mhuxl","totalReactions":0,"__typename":"Comment","replies":{"edges":[],"pageInfo":{"hasNextPage":false,"endCursor":null,"__typename":"PageInfo"},"__typename":"CommentReplyConnection"}},"__typename":"PostCommentEdge"}],"pageInfo":{"hasNextPage":false,"endCursor":"NQ==","__typename":"PageInfo"},"__typename":"PostCommentConnection"},"commenters":{"edges":[{"node":{"_id":"63ca50d0587fc59d3cd728ae","name":"Alexander Panov","photo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1684160213700/sV5HlET6_.jpg","isPro":false,"username":"IJustDev","__typename":"User"},"__typename":"PostCommenterEdge"},{"node":{"_id":"6238983d6ac82a57d1f1f118","name":"Akash Moradiya","photo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1720239865049/aBYUcs7HN.jpeg","isPro":false,"username":"akash3444","__typename":"User"},"__typename":"PostCommenterEdge"},{"node":{"_id":"664292be61fb4d1b6c83736f","name":"Emilla Filipowicz","photo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1715644125182/5d9bb17c-dade-4e6f-b2b7-85633acb831a.jpeg","isPro":false,"username":"emillafilipowicz","__typename":"User"},"__typename":"PostCommenterEdge"},{"node":{"_id":"6244c627b4e1ecee678b5d41","name":"/dev/null","photo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1648674345157/S4sKQX7dN.png","isPro":false,"username":"devnullroot","__typename":"User"},"__typename":"PostCommenterEdge"},{"node":{"_id":"663dfd603f0f4da461443d9e","name":"Arjun Raj","photo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1715338592724/736d63fc-0e7c-4b8a-a4fe-e70b0bca8829.png","isPro":false,"username":"arjun576","__typename":"User"},"__typename":"PostCommenterEdge"}],"__typename":"PostCommenterConnection"}}}

Securing CI/CD pipelines with OIDC, GitHub Actions, and Terraform

6 comments