netbird/dex
0
0
Fork 0
mirror of https://github.com/netbirdio/dex.git synced 2026-05-22 18:43:53 -07:00
Code Issues Packages Projects Releases Wiki Activity

spelling: github

Browse Source 
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
This commit is contained in:
Josh Soref
2023-04-27 09:02:32 -04:00
parent 5ae0132dac
commit 7488f719a7
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/SECURITY.md
+2 -2
View File
@@ -11,10 +11,10 @@ to confirm receipt of the issue.
## Review Process
Once a maintainer has confirmed the relevance of the report, a draft security
advisory will be created on Github. The draft advisory will be used to discuss
advisory will be created on GitHub. The draft advisory will be used to discuss
the issue with maintainers, the reporter(s).
If the reporter(s) wishes to participate in this discussion, then provide
reporter Github username(s) to be invited to the discussion. If the reporter(s)
reporter GitHub username(s) to be invited to the discussion. If the reporter(s)
does not wish to participate directly in the discussion, then the reporter(s)
can request to be updated regularly via email.
docs/enhancements/token-exchange-2023-02-03-#2812.md
+2 -2
View File
@@ -45,13 +45,13 @@ Examples of downstream issues:
Other related Dex issues:
- [#2450 Non-OIDC JWT Connector] is a functionally similar request, but expanded to arbitrary JWTs
- [#1225 GitHub Non-Web application flow support] also asks for an exchange, but for an opaque Github PAT
- [#1225 GitHub Non-Web application flow support] also asks for an exchange, but for an opaque GitHub PAT
More broadly, this fits into recent movements to issue machine identities:
- [GCP Service Identity](https://cloud.google.com/run/docs/securing/service-identity)
- [AWS Execution Role](https://docs.aws.amazon.com/lambda/latest/dg/lambda-intro-execution-role.html)
- [Github Actions OIDC](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect)
- [GitHub Actions OIDC](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect)
- [CircleCI OIDC](https://circleci.com/docs/openid-connect-tokens/)
- [Kubernetes Service Accounts](https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/)
- [SPIFFE](https://spiffe.io/)