GCP Workload Identity Federation: GitHub Actions and GitLab Setup
A practical guide to replacing GCP service-account keys with Workload Identity Federation across GitHub Actions, GitLab, AWS, and Azure.
16 min read
Topic
Workload Identity Federation
Every article tagged Workload Identity Federation, newest first.
2 articles
Articles tagged Workload Identity Federation
Stop Using Service Account Keys: A Guide to Workload Identity Federation
Leaked service account keys are a top cloud security risk. This definitive developer's guide explains how to go keyless with GCP's Workload Identity Federation.
14 min readLooking for something specific?
Search every article by topic, tool or CVE.
Keep reading
Latest from the blog
GitHub Package Firewall: Install-Time Security for AI Agents and Pipelines
GitHub Package Firewall brings install-time npm policy gates, SLSA attestation checks, and version cooldowns to AI coding agents and CI/CD runners.
18 min read
Node.js Brotli RCE (CVE-2026-111497): Patch Guide
Node.js CVE-2026-111497 exposes Brotli decoding to potential RCE. Check affected versions, fetch() exposure, WAF limits, and the October 2026 patch checklist.
15 min read
PHP2Shell (CVE-2026-109618 & CVE-2026-109619): Critical PHP RCE Patch Guide
PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposes 70% of the web to unauthenticated PHP RCE and memory leaks. Check fixed versions, IOCs, and mitigations.
23 min read