Skip to main content

Beyond the OIDC Silver Bullet: Why "Keyless" GitHub Actions Aren't Enough

· 19 min read
Austen Stone
Senior Solutions Engineer @ GitHub

A silver bullet shattering against a layered glass shield

If you've modernized a CI/CD pipeline in the last couple of years, you've heard the gospel of OpenID Connect: stop hardcoding long-lived AWS IAM keys in your repository secrets. Your workflow requests a short-lived token, the cloud verifies the claims, you deploy. It's a real upgrade. It's also where most teams stop thinking, and that's the problem.

The Future of SDLC Automation

· 5 min read

Discussions around AI frequently revolve around this end goal of automation. Where AI is an autonomous software engineer, a note taker, or even your personal chauffeur.

In reality most people are using AI as a tool to improve aspects of our workflows rather than building full blown automated solutions.

I'm Hungry Copilot

· 14 min read

So it's 12:51 on a Wednesday afternoon and I've got nothing in the fridge. I've been using AI for everything so why isn't AI making me lunch? Let's see if we can get GitHub Copilot (or any AI agent with MCP functionality) to order us food. Seems like a simple task.

Google Photos Scraper

· 2 min read

I love taking photos, but I don't love the hassle of hosting them myself. I already pay Google to store my pictures, so why should I have to re-upload them just to display a gallery on my own website?

The catch is that Google Photos doesn't make it easy to get simple, direct links to your images. I just wanted a clean list of URLs for an album I could plug into my site.