Skip to content

Update OIDC authentication section for clarity #46033

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
loganvolkers wants to merge 1 commit into
base: main
Choose a base branch
from
+0 −3
Open

Update OIDC authentication section for clarity #46033

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Update OIDC authentication section for clarity 
Removed note about OIDC authentication support for organization-level private registries. This no longer appreas to be true: https://github.blog/changelog/2026-04-14-dependabot-and-code-scanning-org-level-private-registries/
  • Loading branch information
@loganvolkers
loganvolkers authored Sep 23, 2026
commit ad49df26d0b0c22ecb07e331f5b7c691f7901bad
3 changes: 0 additions & 3 deletions ...zation-security/manage-usage-and-access/giving-org-access-private-registries.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -106,9 +106,6 @@ See [AUTOTITLE](/code-security/how-tos/secure-your-supply-chain/manage-your-depe

OIDC (OpenID Connect) authentication allows {% data variables.product.prodname_dependabot %} to use short-lived credentials from your cloud identity provider to access private registries, eliminating the need to store long-lived secrets. With OIDC, credentials are generated dynamically for each {% data variables.product.prodname_dependabot %} update job. You must configure a trust relationship between your cloud provider and {% data variables.product.github %} before {% data variables.product.prodname_dependabot %} can authenticate.

> [!NOTE]
> OIDC authentication for organization-level private registries is currently supported by {% data variables.product.prodname_dependabot %}. It is not supported by {% data variables.product.prodname_code_scanning %} default setup.

When you select **OIDC** as the authentication method for a private registry, choose one of the supported providers and fill in the required fields:

* **Azure**: Enter the **Tenant ID** (Azure AD tenant ID) and **Client ID** (Azure AD application client ID). You must configure a federated credential in Azure AD that trusts {% data variables.product.github %}'s OIDC provider.
Expand Down
Loading