Version updated for https://github.com/upwarden-io/setup-upwarden to version v2.1.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The setup-upwarden GitHub Action automates the authentication and authorization of package manager dependencies, enabling keyless OIDC access to private registries. It ensures that every dependency fetch in a CI pipeline is authenticated, attributed, and policy-enforced, mitigating security risks associated with unauthenticated and unattributed package fetches. The action works seamlessly across various toolchains (npm, pnpm, yarn, pip, maven, gradle) and provides a simple setup process to integrate OIDC authentication into your CI pipelines.

Version updated for https://github.com/upwarden-io/setup-upwarden to version v1.0.1. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The setup-upwarden action provides a simple and secure way to authenticate and attribute package manager dependencies in CI pipelines. It uses the user’s OIDC identity to mint a short-lived token, ensuring that each dependency fetch is authenticated and attributed, and can be policy-enforced. The action is highly configurable with options for different ecosystems (npm, pip, maven) and supports both GitHub and non-GitHub environments.