Your CI pipeline is about to travel abroad! To ship an artifact, a GitHub Actions workflow has to prove who it is to a system that has never met it, across organizational borders, without mailing around a long-lived secret. That’s OIDC federation, and in five fast minutes we’ll make it click using something everyone already understands: international travel.

Attendee takeaways:

• Why short-lived, federated tokens beat long-lived stored secrets in CI/CD
• How an OIDC token exchange actually works, end to end — issuer, claims, policy, access token
• The most common federation-policy mistakes, and how to anchor your patterns so they only match who you intend