Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> I understand the focus on Github, they are the biggest. But so many use Gitlab, Gitea, Bitbucket, .. Would love to see some examples for those as well

The focus is on GitHub because GitHub Actions' OpenID Connect support is the most mature of the large source code and CI hosts, and trusted publishing fundamentally relies on OIDC. GitLab has OIDC support[1] that we'd ideally integrate against, but I don't know if others do.

[1]: https://about.gitlab.com/blog/2023/02/28/oidc/



Gitlab also doesn't support customizable OIDC audiences yet: https://gitlab.com/groups/gitlab-org/-/epics/7335




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: