You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Replace Docker Hub with Docker where scope is broader than registry
OIDC connections scope access to Docker Hub and Docker Build Cloud,
not just Docker Hub. Keep Docker Hub only where specifically referring
to registry operations.
Copy file name to clipboardExpand all lines: content/actions/how-tos/secure-your-work/security-harden-deployments/oidc-in-docker.md
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,7 +1,7 @@
1
1
---
2
2
title: Configuring OpenID Connect in Docker
3
3
shortTitle: OIDC in Docker
4
-
intro: Use OpenID Connect within your workflows to authenticate with Docker Hub without storing long-lived credentials.
4
+
intro: Use OpenID Connect within your workflows to authenticate with Docker without storing long-lived credentials.
5
5
versions:
6
6
fpt: '*'
7
7
ghec: '*'
@@ -12,11 +12,11 @@ category:
12
12
13
13
## Overview
14
14
15
-
OpenID Connect (OIDC) allows your {% data variables.product.prodname_actions %} workflows to authenticate with [Docker Hub](https://hub.docker.com/) to push and pull container images without storing Docker passwords, {% data variables.product.pat_generic_plural %}, or organization access tokens (OATs) in {% data variables.product.company_short %}.
15
+
OpenID Connect (OIDC) allows your {% data variables.product.prodname_actions %} workflows to authenticate with [Docker](https://www.docker.com/) to access Docker Hub and Docker Build Cloud without storing Docker passwords, {% data variables.product.pat_generic_plural %}, or organization access tokens (OATs) in {% data variables.product.company_short %}.
16
16
17
17
Instead of managing long-lived credentials, you configure a trust relationship between your {% data variables.product.prodname_dotcom %} organization and your Docker organization. When a workflow runs, {% data variables.product.prodname_dotcom %} issues a short-lived OIDC token that Docker validates against your configured rulesets, then issues a scoped access token for the workflow.
18
18
19
-
This guide gives an overview of how to configure Docker Hub to trust {% data variables.product.prodname_dotcom %}'s OIDC as a federated identity, and demonstrates how to use this configuration in a {% data variables.product.prodname_actions %} workflow.
19
+
This guide gives an overview of how to configure Docker to trust {% data variables.product.prodname_dotcom %}'s OIDC as a federated identity, and demonstrates how to use this configuration in a {% data variables.product.prodname_actions %} workflow.
20
20
21
21
For more information, see [OIDC connections](https://docs.docker.com/enterprise/security/oidc-connections/) in the Docker documentation.
22
22
@@ -30,11 +30,11 @@ For more information, see [OIDC connections](https://docs.docker.com/enterprise/
30
30
31
31
* You must have a Docker Business or Docker Team subscription.
32
32
* You must be an organization owner or editor in your Docker organization.
33
-
* You should plan which repositories, branches, and workflows need access to Docker Hub, and configure rulesets accordingly.
33
+
* You should plan which repositories, branches, and workflows need access to Docker, and configure rulesets accordingly.
34
34
35
-
## Adding the identity provider to Docker Hub
35
+
## Adding the identity provider to Docker
36
36
37
-
To use OIDC with Docker, establish a trust relationship between {% data variables.product.prodname_actions %} and Docker Hub by creating an OIDC connection. For more information about this process, see [Create and manage OIDC connections](https://docs.docker.com/enterprise/security/oidc-connections/create-manage/) in the Docker documentation.
37
+
To use OIDC with Docker, establish a trust relationship between {% data variables.product.prodname_actions %} and Docker by creating an OIDC connection. For more information about this process, see [Create and manage OIDC connections](https://docs.docker.com/enterprise/security/oidc-connections/create-manage/) in the Docker documentation.
38
38
39
39
1. Sign in to [Docker Home](https://app.docker.com/) and navigate to your organization.
40
40
1. Go to **Identity & auth** > **OIDC connections**.
@@ -47,9 +47,9 @@ To use OIDC with Docker, establish a trust relationship between {% data variable
47
47
48
48
## Updating your {% data variables.product.prodname_actions %} workflow
49
49
50
-
Once you have created an OIDC connection in Docker Hub, update your workflow to authenticate using the [`docker/oidc-action`](https://github.com/docker/oidc-action) and [`docker/login-action`](https://github.com/docker/login-action) actions.
50
+
Once you have created an OIDC connection in Docker, update your workflow to authenticate using the [`docker/oidc-action`](https://github.com/docker/oidc-action) and [`docker/login-action`](https://github.com/docker/login-action) actions.
51
51
52
-
The following example uses the placeholder `YOUR_CONNECTION_ID` for the connection ID you copied from Docker Hub, and `YOUR_DOCKER_ORG` for your Docker organization name.
52
+
The following example uses the placeholder `YOUR_CONNECTION_ID` for the connection ID you copied from Docker, and `YOUR_DOCKER_ORG` for your Docker organization name.
53
53
54
54
```yaml
55
55
{% data reusables.actions.actions-not-certified-by-github-comment %}
0 commit comments