Browse Source

spelling: github

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
pull/2919/head
Josh Soref 3 years ago
parent
commit
7488f719a7
  1. 4
      .github/SECURITY.md
  2. 4
      docs/enhancements/token-exchange-2023-02-03-#2812.md

4
.github/SECURITY.md

@ -11,10 +11,10 @@ to confirm receipt of the issue.
## Review Process ## Review Process
Once a maintainer has confirmed the relevance of the report, a draft security Once a maintainer has confirmed the relevance of the report, a draft security
advisory will be created on Github. The draft advisory will be used to discuss advisory will be created on GitHub. The draft advisory will be used to discuss
the issue with maintainers, the reporter(s). the issue with maintainers, the reporter(s).
If the reporter(s) wishes to participate in this discussion, then provide If the reporter(s) wishes to participate in this discussion, then provide
reporter Github username(s) to be invited to the discussion. If the reporter(s) reporter GitHub username(s) to be invited to the discussion. If the reporter(s)
does not wish to participate directly in the discussion, then the reporter(s) does not wish to participate directly in the discussion, then the reporter(s)
can request to be updated regularly via email. can request to be updated regularly via email.

4
docs/enhancements/token-exchange-2023-02-03-#2812.md

@ -45,13 +45,13 @@ Examples of downstream issues:
Other related Dex issues: Other related Dex issues:
- [#2450 Non-OIDC JWT Connector] is a functionally similar request, but expanded to arbitrary JWTs - [#2450 Non-OIDC JWT Connector] is a functionally similar request, but expanded to arbitrary JWTs
- [#1225 GitHub Non-Web application flow support] also asks for an exchange, but for an opaque Github PAT - [#1225 GitHub Non-Web application flow support] also asks for an exchange, but for an opaque GitHub PAT
More broadly, this fits into recent movements to issue machine identities: More broadly, this fits into recent movements to issue machine identities:
- [GCP Service Identity](https://cloud.google.com/run/docs/securing/service-identity) - [GCP Service Identity](https://cloud.google.com/run/docs/securing/service-identity)
- [AWS Execution Role](https://docs.aws.amazon.com/lambda/latest/dg/lambda-intro-execution-role.html) - [AWS Execution Role](https://docs.aws.amazon.com/lambda/latest/dg/lambda-intro-execution-role.html)
- [Github Actions OIDC](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect) - [GitHub Actions OIDC](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect)
- [CircleCI OIDC](https://circleci.com/docs/openid-connect-tokens/) - [CircleCI OIDC](https://circleci.com/docs/openid-connect-tokens/)
- [Kubernetes Service Accounts](https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/) - [Kubernetes Service Accounts](https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/)
- [SPIFFE](https://spiffe.io/) - [SPIFFE](https://spiffe.io/)

Loading…
Cancel
Save