🧰 OpenID Connect

The items that name it 43

• David Gutierrez | Eng (@david_x_ai) on X
  threadas classification.technologies2026-10-26It is written here as OIDC.
• alex lee (@alexlee20122022) on X
  threadas classification.technologies2026-10-25It is written here as OIDC.
• Gheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles
  writeupas classification.technologies2026-10-25It is written here as OIDC.
• Mikko Laakkonen (@mikkolaakkonen) on X
  threadas classification.technologies2026-10-17It is written here as OIDC.
• Penetration testing every deployment with AWS Continuum
  articleas classification.technologies2026-10-14It is written here as OIDC.
• Supply Chain Attack targeting Cline installs OpenClaw | Endor Labs
  writeupas classification.technologies2026-10-12It is written here as OIDC.
• How a Misconfigured CI Workflow Became an npm Supply-Chain Compromise | Blog | Endor Labs
  writeupas classification.technologies2026-10-12It is written here as OIDC.
• Identity-aware AI data agents with AWS Lake Formation and Trusted Identity Propagation
  articleas classification.technologies2026-10-06It is written here as OIDC.
• Python Hub (@PythonHub) on X
  toolas classification.technologies2026-10-02It is written here as OIDC.
• Identity Management for Agentic AI [pdf] (2025)
  paperas tools2026-10-01

  identity layer used alongside OAuth for user authorization; designed for individual users, lacking support for agents acting on behalf of teams

• Proactive Defense: Hardening Code Pipelines and CI/CD Infrastructure
  articleas tools2026-09-24It is written here as OpenID Connect (OIDC).

  Exchanges pipeline identities for short-lived tokens instead of persistent secrets.

• npm Supply-Chain Attack Abuses Trusted Publishing to Ship GHAPPIER Loader
  articleas classification.technologies2026-09-22It is written here as OIDC.
• SAML: A fractal of bad design
  articleas affected products2026-09-21It is written here as OIDC (OpenID Connect).

  modern alternative protocol to SAML; 1.0 specification published 2014

• Happy Birthday, Shai-Hulud
  articleas classification.technologies2026-09-18It is written here as OIDC.
• Architecting resilient authentication with Amazon Cognito multi-Region replication
  articleas classification.technologies2026-09-15It is written here as OIDC.
• SolarWinds took a nation-state. The next attack just needs an LLM and $5. | Blog | Endor Labs
  articleas tools2026-09-11It is written here as OIDC.

  Cited as an existing tool/standard to fix supply chain security issues (identity federation for tokens).

• @7nohe/openapi-react-query-codegen Compromised Through an Exposed npm Publishing Workflow
  writeupas classification.technologies2026-08-28It is written here as OIDC.
• Shai-Hulud was the best thing to happen to supply chain security
  articleas classification.technologies2026-08-24It is written here as OIDC.
• MinIO Security Lab
  repoas classification.technologies2026-08-21It is written here as OIDC.
• NPM Malware Compromises keyv and cacheable with 500M+ Weekly Downloads and Spreads to Hundreds of Packages | Blog | Endor Labs
  advisoryas classification.technologies2026-08-04It is written here as OIDC.
• The 2026-07-28 MCP Specification: Stateless Core, MRTR, Header-Based Routing
  articleas classification.technologies2026-07-28It is written here as OIDC.
• Find Unused, Stale, and OIDC-Replaceable GitHub Actions Secrets Across Your GitHub Organization
  articleas classification.technologies2026-07-23It is written here as OIDC.
• Socket: npm v12 Ships With Install Scripts Off by Default
  articleas classification.key entities2026-07-15It is written here as OIDC.
• Injective npm Supply Chain Attack: 18 Packages Backdoored to Steal Crypto Wallet Keys
  writeupas classification.technologies2026-07-12It is written here as OIDC.
• ThinkWatch
  repoas classification.technologies2026-07-04It is written here as OIDC.
• npm now freezes high-impact accounts after risky account changes
  articleas classification.technologies2026-06-26It is written here as OIDC.
• Orca Security: Red Hat npm Packages Compromised in Supply-Chain Attack Spreading Credential-Stealing Worm
  articleas classification.technologies2026-06-02It is written here as OIDC.
• Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm
  writeupas classification.technologies2026-06-01It is written here as OIDC.
• Socket: Mini Shai-Hulud
  articleas classification.technologies2026-05-22It is written here as OIDC.
• The 2026-07-28 MCP Specification Release Candidate
  articleas classification.technologies2026-05-21It is written here as OIDC.
• Socket: TanStack npm Packages Compromised
  writeupas classification.technologies2026-05-20It is written here as OIDC.
• Dependabot & Code Scanning: Org-Level Private Registries
  otheras classification.technologies2026-05-13It is written here as OIDC.
• Protocol Soup
  toolas classification.technologies2026-05-12It is written here as OIDC.
• Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstack
  writeupas classification.technologies2026-05-11It is written here as OIDC.
• The complete GitHub Actions security checklist
  articleas tools2026-05-11It is written here as OIDC (OpenID Connect).

  Used to obtain short-lived cloud credentials from AWS, Azure, or GCP instead of storing long-lived static secrets.

• Terraform Compliance Guardrails
  repoas classification.technologies2026-05-06It is written here as OIDC.
• CI/CD Threat Modelling
  articleas classification.technologies2026-05-06It is written here as OIDC.
• PyPI Access Control Vulns Patched
  articleas classification.technologies2026-05-06It is written here as OIDC.
• Octelium
  repoas classification.technologies2026-05-05It is written here as OIDC.
• Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages
  articleas classification.technologiesIt is written here as OIDC.
• Insecure cryptographic defaults in oidcProvider: alg=none advertised and plain PKCE accepted by default
  advisoryas classification.technologiesIt is written here as OIDC.
• Dev Machine Guard Now Supports Linux - StepSecurity
  articleas classification.technologiesIt is written here as OIDC.
• Megalodon: Mass GitHub Actions Secret Exfiltration Across 5,500+ Public Repositories - StepSecurity
  writeupas classification.technologiesIt is written here as OIDC.

In every workspace you can read 44