How to use Github Actions with Google's Workload Identity Federation

You can build and deploy code (CI/CD) to Google Cloud using GitHub Actions by uploading a service account key to GitHub. But that opens one more spot of vulnerability and it makes it hard to rotate keys. Some organizations even forbid exporting service account keys for that reason.
Let's fix that! If you use Google's Workload Identity Federation, you can still build and deploy with GitHub Actions, but you don't have to upload a sensitive key to GitHub. In this video Luka and Martin will show you how.
Check out more episodes of Serverless Expeditions → goo.gle/Server...
Subscribe to Google Cloud Tech → goo.gle/Google...
#ServerlessExpeditions​