Docker and CI/CD · Middle · Question 43 of 75

What does OIDC give a CI pipeline that deploys to a cloud provider?

1A faster network connection to the cloud provider
2Automatic encryption of every build artifact
✓Correct answer: Short-lived credentials instead of stored long-lived keys

Explanation

The job gets a signed identity token, and the cloud trusts it for a specific repo, branch or environment. No static access keys to leak or rotate.

Further reading

GitHub Docs: About security hardening with OpenID Connect ↗

Test yourself

Take the Docker and CI/CD · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.