GitLab Secrets Manager
Secure GitLab CI/CD workflows using OIDC JWT on a DevSecOps platform

Secure GitLab CI/CD workflows using OIDC JWT on a DevSecOps platform

2/28/2023 · Dov Hershkovitch

What this post added

This post details the evolution of GitLab's CI/CD JWT token support, introducing OpenID Connect (OIDC) for broader cloud provider integration (AWS, GCP). It enhances security by making JWT tokens opt-in via the `id_token` keyword in `.gitlab-ci.yml` and mandates the `aud` (audience) claim for token validation. The post also announces upcoming breaking changes in GitLab 16.0, deprecating older JWT methods in favor of the secured OIDC token and advising users to migrate to `id_token` and enable JWT access limitations.

Read the original post ↗