SecBlog cheat sheet: GitHub Actions OIDC hardening for AWS, Azure and Google Cloud. 23 checks to retire long-lived keys and lock down who can assume your cloud roles. https://secblog.reedcloudsec.com/github-actions-oidc-hardening-cheat-sheet/
SecBlogGitHub Actions OIDC Hardening Cheat Sheet: AWS, Azure, GCPGive GitHub Actions access to AWS, Azure and Google Cloud without long-lived keys, trusting immutable IDs, not repo names. A 23-item checklist.