{
  "id": 470936,
  "title": "GitHub Actions needs OIDC audience constraints",
  "url": "https://urgent.news/2026/08/10/github-actions-needs-oidc-audience-constraints",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-08-10T13:30:18.000Z",
  "source": {
    "name": "Lobsters",
    "slug": "lobsters",
    "url": "https://blog.yossarian.net/2026/08/10/github-actions-needs-oidc-audience-constraints"
  },
  "original_language": "en",
  "account": "GitHub Actions' current mechanism for granting OIDC identities to workflows presents a notable security vulnerability. Unlike GitLab, which requires the OIDC audience (aud) to be statically declared, GitHub requires dynamic audience selection during runtime. This design decision allows a job to request ID tokens with any audience, enabling an attacker to potentially misapply stolen credentials to other services. The critical claim in an OIDC ID token is the audience (aud), which prevents token acceptance by unauthorized services. However, by allowing dynamic audience control, GitHub inadvertently empowers attackers to exploit this weakness. This issue is particularly concerning given that many jobs running on GitHub Actions execute third-party code, potentially leading to the creation of ID tokens with unintended audiences. While Trusted Publishing's design mitigates this risk by incorporating workflow names into machine identities, such a constraint may not suit all use cases. Therefore, GitHub could introduce a mechanism to constrain the audiences for which jobs can request ID tokens, thereby enhancing security without impeding legitimate workflows.",
  "summary": null,
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "InfoQ",
        "title": "GitHub Hardens npm and Actions Defaults, Drawing Debate over Delays versus Signing",
        "url": "https://urgent.news/2026/08/08/github-hardens-npm-and-actions-defaults-drawing-debate-over-delays",
        "published": "2026-08-08T07:45:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}