4 ms·

I understand the focus on Github, they are the biggest. But so many use Gitlab, Gitea, Bitbucket, .. Would love to see some examples for those as well

• woodruffw 3y ago
  > I understand the focus on Github, they are the biggest. But so many use Gitlab, Gitea, Bitbucket, .. Would love to see some examples for those as well The focus is on GitHub because GitHub Actions' OpenID Connect support is the most mature of the large source code and CI hosts, and trusted publishing fundamentally relies on OIDC. GitLab has OIDC support[1] that we'd ideally integrate against, but I don't know if others do. [1]: https://about.gitlab.com/blog/2023/02/28/oidc/ https://about.gitlab.com/blog/2023/02/28/oidc/
  • deleted 3y ago
    [deleted]
  • di 3y ago
    Gitlab also doesn't support customizable OIDC audiences yet: https://gitlab.com/groups/gitlab-org/-/epics/7335 https://gitlab.com/groups/gitlab-org/-/epics/7335