GCP Workload Identity Federation: GitHub Actions and GitLab Setup
A practical guide to replacing GCP service-account keys with Workload Identity Federation across GitHub Actions, GitLab, AWS, and Azure.
16 min read
Topic
GitHub Actions Security
Every article tagged GitHub Actions Security, newest first.
2 articles
Articles tagged GitHub Actions Security
The OWASP Top 10 CI/CD Security Risks: A Practitioner’s Blueprint
Master the OWASP Top 10 CI/CD Security Risks. Concrete attacks, code examples, and battle-tested controls to harden your pipelines against supply chain threats.
8 min readLooking for something specific?
Search every article by topic, tool or CVE.
Keep reading
Latest from the blog
AI-Era CVE Trends: Discovery and Exploitation
Google's GTIG data shows CVE disclosures doubled in 2026, n-day exploitation is accelerating, and AI stacks are now targets. See what it means and how to respond.
13 min read
Cloudflare Agentic SOC: Managed Defense AI Harness Explained
Cloudflare Managed Defense is testing an evidence-grounded SOC harness with Clef and specialist AI agents. Learn how it works, what stays human-controlled, who can access the beta, and what agentic SOCs need next.
11 min read
Cloudflare CA: Free Post-Quantum Certificates with MTCs in 2027
Cloudflare plans free MTC certificates from 2027. See its new CA roadmap and current PQC services: Automatic Key Exchange, ML-DSA origin authentication, Tunnel, and certificate monitoring.
12 min read