GitHub Actions OIDC for Azure: No More Expired Secrets
Happy Halloween! 🎃 Let me tell you a horror story. Recently, my pipeline stopped deploying. No code change, no failing test, just a red run. I wondered why, until it clicked: the client secret of my old service principal had expired. A zombie secret, haunting my pipeline. Annoying? Yes. Avoidable? Absolutely. The better way is GitHub Actions OIDC for Azure. It removes the secret completely. First, GitHub proves who your workflow is with a short-lived token. Next, Microsoft Entra ID checks…