# github credentials

Published articles for github credentials.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Chainguard's Trail of Bits security assessment

DevFeed: [Chainguard's Trail of Bits security assessment](<https://devfeed.tech/articles/chainguard-s-trail-of-bits-security-assessment-12997.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/chainguards-trail-of-bits-security-assessment>)

Published: 2024-05-14T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [GitHub Actions](<https://devfeed.tech/topics/github-actions.md>), [Code review](<https://devfeed.tech/topics/code-review.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [Monitoring](<https://devfeed.tech/topics/monitoring.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [code-review](<https://devfeed.tech/tags/code-review.md>), [github-actions](<https://devfeed.tech/tags/github-actions.md>), [github-credentials](<https://devfeed.tech/tags/github-credentials.md>), [github-pat](<https://devfeed.tech/tags/github-pat.md>), [least-privilege](<https://devfeed.tech/tags/least-privilege.md>), [monitoring](<https://devfeed.tech/tags/monitoring.md>), [octo-sts](<https://devfeed.tech/tags/octo-sts.md>), [security](<https://devfeed.tech/tags/security.md>), [software-security-audit](<https://devfeed.tech/tags/software-security-audit.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>)

### AI overview

Chainguard describes an independent Trail of Bits security assessment of its production environment and supply-chain defenses. The assessment found no critical issues, but identified command injection in a GitHub Action and insufficient redaction of sensitive CloudEvents; Chainguard reports that both issues were fixed. The article also outlines security improvements involving GitHub credentials, GitHub Actions monitoring, FIDO security keys, anomaly monitoring, and production-network alerts.

### Source excerpt

Trust but verify: Read about Chainguard's independent security assessment by Trail of Bits and our dedication to transparency in security practices.

## Open sourcing Octo STS

DevFeed: [Open sourcing Octo STS](<https://devfeed.tech/articles/open-sourcing-octo-sts-13197.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/open-sourcing-octo-sts>)

Published: 2024-05-02T00:00:00Z

Content type: release

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [octo sts](<https://devfeed.tech/topics/octo-sts.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [Security](<https://devfeed.tech/topics/security.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [Infrastructure as code](<https://devfeed.tech/topics/infrastructure-as-code.md>)

Tags: [announce](<https://devfeed.tech/tags/announce.md>), [credential-leak](<https://devfeed.tech/tags/credential-leak.md>), [github](<https://devfeed.tech/tags/github.md>), [github-credentials](<https://devfeed.tech/tags/github-credentials.md>), [github-vulnerability](<https://devfeed.tech/tags/github-vulnerability.md>), [octo-sts](<https://devfeed.tech/tags/octo-sts.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [security](<https://devfeed.tech/tags/security.md>), [security-best-practices](<https://devfeed.tech/tags/security-best-practices.md>), [security-token-service](<https://devfeed.tech/tags/security-token-service.md>), [source](<https://devfeed.tech/tags/source.md>)

### AI overview

Chainguard announces the open sourcing of Octo STS, a GitHub Security Token Service designed to exchange short-lived third-party tokens for short-lived first-party tokens. The repository includes its source code and the infrastructure as code used to deploy and monitor it, enabling teams to inspect, host, and manage their own instance.

### Source excerpt

Open Source Octo STS Released -- Chainguard's solution to eliminate long-lived GitHub credentials. Improve security, collaborate, get updates.

## Replacing Long-Lived GitHub Personal Access Tokens with Short-Lived Credentials Using Octo STS

DevFeed: [Replacing Long-Lived GitHub Personal Access Tokens with Short-Lived Credentials Using Octo STS](<https://devfeed.tech/articles/the-end-of-github-pats-you-can-t-leak-what-you-don-t-have-13250.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/the-end-of-github-pats-you-cant-leak-what-you-dont-have>)

Published: 2024-04-11T00:00:00Z

Content type: tutorial

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [GitHub](<https://devfeed.tech/topics/github.md>), [Security](<https://devfeed.tech/topics/security.md>), [octo sts](<https://devfeed.tech/topics/octo-sts.md>), [GitHub Actions](<https://devfeed.tech/topics/github-actions.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>)

Tags: [ephemerality](<https://devfeed.tech/tags/ephemerality.md>), [github](<https://devfeed.tech/tags/github.md>), [github-actions](<https://devfeed.tech/tags/github-actions.md>), [github-credentials](<https://devfeed.tech/tags/github-credentials.md>), [github-pat](<https://devfeed.tech/tags/github-pat.md>), [github-personal-access-token](<https://devfeed.tech/tags/github-personal-access-token.md>), [least-privilege](<https://devfeed.tech/tags/least-privilege.md>), [minimalism](<https://devfeed.tech/tags/minimalism.md>), [octo-sts](<https://devfeed.tech/tags/octo-sts.md>), [personal-access-token](<https://devfeed.tech/tags/personal-access-token.md>), [principle-of-ephemerality](<https://devfeed.tech/tags/principle-of-ephemerality.md>), [pull-requests](<https://devfeed.tech/tags/pull-requests.md>), [rotation](<https://devfeed.tech/tags/rotation.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [security](<https://devfeed.tech/tags/security.md>), [security-token-service](<https://devfeed.tech/tags/security-token-service.md>)

### AI overview

This article explains how Chainguard replaced long-lived GitHub Personal Access Tokens and other credentials with short-lived credentials across several GitHub organizations. It introduces Octo STS as a Security Token Service for GitHub credentials and describes the automation use cases that built-in GitHub Actions tokens could not support.

### Source excerpt

Ditch GitHub PATs for better security. Learn how to replace long-lived tokens and reduce your risk of leaked credentials.

## SSH into AWS using Github for RBAC

DevFeed: [SSH into AWS using Github for RBAC](<https://devfeed.tech/articles/ssh-into-aws-using-github-for-rbac-29584.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/aws-github-sso/>)

Author: sasha@goteleport.com (Sasha Klizhentas)

Published: 2017-04-25T00:00:00Z

Content type: tutorial

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [Amazon Web Services](<https://devfeed.tech/topics/aws.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [ssh](<https://devfeed.tech/topics/ssh.md>), [Access Control](<https://devfeed.tech/topics/access-control.md>), [AWS IAM](<https://devfeed.tech/topics/aws-iam.md>), [Single sign-on (SSO)](<https://devfeed.tech/topics/sso.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Auth0](<https://devfeed.tech/topics/auth0.md>), [GitHub API](<https://devfeed.tech/topics/github-api.md>)

Tags: [access-control](<https://devfeed.tech/tags/access-control.md>), [auth0](<https://devfeed.tech/tags/auth0.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [aws](<https://devfeed.tech/tags/aws.md>), [aws-iam](<https://devfeed.tech/tags/aws-iam.md>), [github](<https://devfeed.tech/tags/github.md>), [github-credentials](<https://devfeed.tech/tags/github-credentials.md>), [saml](<https://devfeed.tech/tags/saml.md>), [ssh](<https://devfeed.tech/tags/ssh.md>)

### AI overview

This tutorial explains how to use GitHub as a centralized identity source for AWS access. It covers configuring AWS Console SSO, mapping GitHub teams to AWS IAM roles and SSH access rules, and using Auth0 with SAML 2.0 and Teleport Enterprise to control and audit access.

### Source excerpt

How do you let employees access AWS infrastructure using GitHub credentials, restrict access by team, and configure SSH with GitHub? This post covers it all.