https://www.cloudkaramchari.com/tags/docker-hub/Recent content in Docker Hub on CloudkaramchariHugo -- gohugo.ioencloudkaramchariSat, 08 Aug 2026 12:00:00 +0530https://www.cloudkaramchari.com/blog/docker-hub-oidc-authentication-github-actions-no-more-stored-tokens/Sat, 08 Aug 2026 12:00:00 +0530https://www.cloudkaramchari.com/blog/docker-hub-oidc-authentication-github-actions-no-more-stored-tokens/ <h1 id="docker-hub-oidc-for-github-actions-retire-your-stored-access-tokens">Docker Hub OIDC for GitHub Actions: Retire Your Stored Access Tokens</h1> <p>If your CI pipeline pushes images to Docker Hub, there's a good chance a Personal Access Token (PAT) or Organization Access Token (OAT) is sitting in your GitHub repository secrets right now — valid for months, scoped broader than you'd like, and one leaked build log away from being someone else's problem. On July 31, 2026, Docker shipped OIDC connections for GitHub Actions, closing that gap the same way AWS and GCP closed it for cloud credentials years ago: workflows authenticate with a token that's minted per run and expires in minutes, so there's nothing sitting in secrets to steal or rotate.</p>