TechPrufer
Get started
Docker
Docker logoDocker · Feature trail

OIDC for CI/CD Authentication

1 post · Jul 2026

What this trail covers

This feature thread tracks Docker's advancements in secure authentication for CI/CD pipelines. Initially, the focus was on eliminating stored credentials in CI/CD workflows. Subsequent posts detail the introduction of OpenID Connect (OIDC) support for GitHub Actions, allowing organizations to authenticate with short-lived, per-run tokens instead of static secrets. This enables enhanced security by reducing the risk of credential leakage and simplifying credential rotation.

All Docker trails
  1. Docker OIDC connections for GitHub Actions available for Docker Orgs | DockerThis post introduces Docker's support for OpenID Connect (OIDC) for GitHub Actions. It details how OIDC connections eliminate the need for stored Personal Access Tokens (PATs) or Organization Access Tokens (OATs) in CI/CD pipelines by enabling workflows to authenticate with short-lived, per-run tokens. The post explains the OIDC token exchange flow, the setup process involving Docker Home for connection and ruleset configuration, and the necessary updates to GitHub Actions workflows using the `docker/login-action`. It also clarifies what remains unchanged, such as existing PATs and local development authentication methods.