Below you will find pages that utilize the taxonomy term “deadbolt-sh”
December 20, 2025
Deadbolt JIT Access
Version updated for https://github.com/deadbolt-sh/jit-action to version v1.0.0.
This action is used across all versions by ? repositories. Go to the GitHub Marketplace to find the latest changes.
Release notes 🔐 Deadbolt JIT Action v1.0.0 The secure way to deploy from GitHub Actions - no permanent SSH keys required.
Highlights 🎫 Zero Secrets - Uses GitHub OIDC authentication, no tokens to store or rotate ⏱️ Short-Lived Access - SSH keys automatically expire (default: 5 minutes) 📋 Full Audit Trail - Every deployment logged with repo, branch, actor, and commit SHA 🛡️ Defense in Depth - IP restricted to GitHub Actions runners, command restrictions optional Quick Start permissions: id-token: write contents: read jobs: deploy: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - uses: deadbolt-sh/jit-action@v1 id: ssh with: server_id: srv_abc123 - run: rsync -avz -e "ssh -i ${{ steps.