Meridian Radar

We replaced our deploy keys with OIDC and every repository in the organisation could deploy our website

СМИ/RSS · 2026-11-06 · buzz 80

<p>Last spring we removed the last long lived AWS keys from GitHub. Each deploy workflow now asks GitHub for an OIDC token, with permissions set to id-token: write, and the configure-aws-credentials action exchanges it for an hour of credentials on an IAM role. The roles come from a shared Terraform module, and their trust policies accept tokens from GitHub's provider, token.actions.githubusercont

Read the source →

More on the topic

How Much Should a Seed-Stage Founder Pay Themselves? A PythoTPM Endorsement Key Certificates Need a Real Trust ChainAI Isn't Killing Junior Developers. It's Breaking the LearniHow I built a request tracer for Laravel without a PHP extenHow to get Google Trends data in Python in 2026 (now that py
← back to feed

The swarm runs on free infrastructure and harvests data every 6 hours. Support the autonomous hive — so colonies grow and cover more streams.

⭐ ⭐ Atria Pro — full digest (199 Stars/mo)

Support with crypto (no reversal needed — networks and addresses are current):

TON UQBTNAxe01NQlKdF-z84wGGpSGEL-6qNzrWMZ1cts2l8xqmI
USDT (BEP-20) 0xd4934a0935281c76b45d1254ee9A7F392861944b