Skip to content

Commit 18f1857

Browse files
committed
Replace Docker Hub with Docker where scope is broader than registry
OIDC connections scope access to Docker Hub and Docker Build Cloud, not just Docker Hub. Keep Docker Hub only where specifically referring to registry operations.
1 parent bc657ad commit 18f1857

1 file changed

Lines changed: 8 additions & 8 deletions

File tree

  • content/actions/how-tos/secure-your-work/security-harden-deployments

content/actions/how-tos/secure-your-work/security-harden-deployments/oidc-in-docker.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: Configuring OpenID Connect in Docker
33
shortTitle: OIDC in Docker
4-
intro: Use OpenID Connect within your workflows to authenticate with Docker Hub without storing long-lived credentials.
4+
intro: Use OpenID Connect within your workflows to authenticate with Docker without storing long-lived credentials.
55
versions:
66
fpt: '*'
77
ghec: '*'
@@ -12,11 +12,11 @@ category:
1212

1313
## Overview
1414

15-
OpenID Connect (OIDC) allows your {% data variables.product.prodname_actions %} workflows to authenticate with [Docker Hub](https://hub.docker.com/) to push and pull container images without storing Docker passwords, {% data variables.product.pat_generic_plural %}, or organization access tokens (OATs) in {% data variables.product.company_short %}.
15+
OpenID Connect (OIDC) allows your {% data variables.product.prodname_actions %} workflows to authenticate with [Docker](https://www.docker.com/) to access Docker Hub and Docker Build Cloud without storing Docker passwords, {% data variables.product.pat_generic_plural %}, or organization access tokens (OATs) in {% data variables.product.company_short %}.
1616

1717
Instead of managing long-lived credentials, you configure a trust relationship between your {% data variables.product.prodname_dotcom %} organization and your Docker organization. When a workflow runs, {% data variables.product.prodname_dotcom %} issues a short-lived OIDC token that Docker validates against your configured rulesets, then issues a scoped access token for the workflow.
1818

19-
This guide gives an overview of how to configure Docker Hub to trust {% data variables.product.prodname_dotcom %}'s OIDC as a federated identity, and demonstrates how to use this configuration in a {% data variables.product.prodname_actions %} workflow.
19+
This guide gives an overview of how to configure Docker to trust {% data variables.product.prodname_dotcom %}'s OIDC as a federated identity, and demonstrates how to use this configuration in a {% data variables.product.prodname_actions %} workflow.
2020

2121
For more information, see [OIDC connections](https://docs.docker.com/enterprise/security/oidc-connections/) in the Docker documentation.
2222

@@ -30,11 +30,11 @@ For more information, see [OIDC connections](https://docs.docker.com/enterprise/
3030

3131
* You must have a Docker Business or Docker Team subscription.
3232
* You must be an organization owner or editor in your Docker organization.
33-
* You should plan which repositories, branches, and workflows need access to Docker Hub, and configure rulesets accordingly.
33+
* You should plan which repositories, branches, and workflows need access to Docker, and configure rulesets accordingly.
3434

35-
## Adding the identity provider to Docker Hub
35+
## Adding the identity provider to Docker
3636

37-
To use OIDC with Docker, establish a trust relationship between {% data variables.product.prodname_actions %} and Docker Hub by creating an OIDC connection. For more information about this process, see [Create and manage OIDC connections](https://docs.docker.com/enterprise/security/oidc-connections/create-manage/) in the Docker documentation.
37+
To use OIDC with Docker, establish a trust relationship between {% data variables.product.prodname_actions %} and Docker by creating an OIDC connection. For more information about this process, see [Create and manage OIDC connections](https://docs.docker.com/enterprise/security/oidc-connections/create-manage/) in the Docker documentation.
3838

3939
1. Sign in to [Docker Home](https://app.docker.com/) and navigate to your organization.
4040
1. Go to **Identity & auth** > **OIDC connections**.
@@ -47,9 +47,9 @@ To use OIDC with Docker, establish a trust relationship between {% data variable
4747

4848
## Updating your {% data variables.product.prodname_actions %} workflow
4949

50-
Once you have created an OIDC connection in Docker Hub, update your workflow to authenticate using the [`docker/oidc-action`](https://github.com/docker/oidc-action) and [`docker/login-action`](https://github.com/docker/login-action) actions.
50+
Once you have created an OIDC connection in Docker, update your workflow to authenticate using the [`docker/oidc-action`](https://github.com/docker/oidc-action) and [`docker/login-action`](https://github.com/docker/login-action) actions.
5151

52-
The following example uses the placeholder `YOUR_CONNECTION_ID` for the connection ID you copied from Docker Hub, and `YOUR_DOCKER_ORG` for your Docker organization name.
52+
The following example uses the placeholder `YOUR_CONNECTION_ID` for the connection ID you copied from Docker, and `YOUR_DOCKER_ORG` for your Docker organization name.
5353

5454
```yaml
5555
{% data reusables.actions.actions-not-certified-by-github-comment %}

0 commit comments

Comments
 (0)