Docker OIDC connections for GitHub Actions available for Docker Orgs | Docker

This post introduces OpenID Connect (OIDC) integration for Docker Hub, allowing GitHub Actions to authenticate using short-lived, per-run tokens instead of static Personal Access Tokens (PATs) or Organization Access Tokens (OATs). It details the problem of stored credentials in CI/CD, explains the OIDC token exchange flow, and provides step-by-step instructions for setting up OIDC connections in Docker Home and updating GitHub Actions workflows. The post emphasizes the security benefits of eliminating stored secrets and outlines what remains unchanged, such as existing PATs and local development authentication methods.