enhance(actions): add OIDC workload identity support - #39052

Open

0xMax42 wants to merge 14 commits into

go-gitea:mainfrom

0xMax42:feat/actions-oidc

Commits on Aug 23, 2026

Add OIDC support for actions

lunny
authored and
0xMax42
committed
b67ec2d
fix(actions): harden OIDC workload identity
0xMax42
committed
f369ce5
fix(actions): require workflow path for OIDC
0xMax42
committed
e579baf
fix(actions): require complete reusable OIDC provenance
0xMax42
committed
dd39306
fix(actions): normalize id-token read permission
0xMax42
committed
339a8b0
fix(actions): skip OIDC authorization when disabled
0xMax42
committed
ca3beed
test(actions): cover workflow path propagation
0xMax42
committed
348f122
test(actions): cover reusable workflow parent cycles
0xMax42
committed
815e82e
perf(actions): skip unnecessary OIDC authorization
0xMax42
committed
1ac168e
test(actions): cover reusable permission clamping
0xMax42
committed
cd74584
fix(actions): preserve OIDC backend errors
0xMax42
committed
38a0504
fix(actions): require complete OIDC root provenance
0xMax42
committed
0db13aa
test(actions): strengthen OIDC integration coverage
0xMax42
committed
c39e5bd
fix(modelmigration): restore v28 import
0xMax42
committed
a54eaa8