OIDC 与云部署身份 | GitHub
本章覆盖：OpenID Connect；federated identity；short-lived token；trust policy；repository / branch / environment claims；cloud provider；secretless credential model；least privilege；long-lived cloud key risk；这是现代 CI/CD 安全的重要企业能力。
本章知识点
- OpenID Connect
- federated identity
- short-lived token
- trust policy
- repository / branch / environment claims
- cloud provider
- secretless credential model
- least privilege
- long-lived cloud key risk
- 这是现代 CI/CD 安全的重要企业能力