A team wants a deployment workflow to exchange GitHub identity for a cloud access token without storing any cloud secret in the repository. What must they configure?
id-token: write permission and an OIDC trust relationship in the cloud providercontents: write permission and a repository secret containing the cloud keypackages: write permissionMore Secure and optimize automation Questions
28 questions
Full GitHub Actions Practice Test
All topics covered
All GitHub Actions Questions
Browse by topic
Related Questions
Why do GitHub Actions workflows use OpenID Connect with cloud providers?...
What do artifact attestations help software consumers verify?...
A workflow author wants to run a step only when a secret exists. What should they do?...
A workflow runs for a pull request from a forked repository. Which credential behavior should the ma...
A caller workflow wants a reusable workflow to use one of the caller's secrets. What must the caller...
Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy
Discussion
Be the first to share your understanding of this concept
Sign in to join the discussion