GCP Workload Identity Federation: GitHub Actions and GitLab Setup
A practical guide to replacing GCP service-account keys with Workload Identity Federation across GitHub Actions, GitLab, AWS, and Azure.
16 min read
Topic
Workload Identity Federation
Every article tagged Workload Identity Federation, newest first.
2 articles
Articles tagged Workload Identity Federation
Stop Using Service Account Keys: A Guide to Workload Identity Federation
Leaked service account keys are a top cloud security risk. This definitive developer's guide explains how to go keyless with GCP's Workload Identity Federation.
14 min readLooking for something specific?
Search every article by topic, tool or CVE.
Keep reading
Latest from the blog
Node.js Brotli RCE (CVE-2026-111497): Patch Guide
Node.js CVE-2026-111497 exposes Brotli decoding to potential RCE. Check affected versions, fetch() exposure, WAF limits, and the October 2026 patch checklist.
15 min read
PHP2Shell (CVE-2026-109618 & CVE-2026-109619): Critical PHP RCE Patch Guide
PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposes 70% of the web to unauthenticated PHP RCE and memory leaks. Check fixed versions, IOCs, and mitigations.
23 min read
Google Cloud VPC-SC Updates: Folders, PSC Endpoints & Remediation
Google Cloud VPC Service Controls now supports folder-level perimeters, folder and organization rules, PSC endpoints, service patterns, and guided violation remediation. Here are the technical details and YAML configs.
7 min read