{"meta":{"title":"Security in GitHub Actions","intro":"Learn about security as a concept in GitHub Actions.","product":"GitHub Actions","breadcrumbs":[{"href":"/en/enterprise-cloud@latest/actions","title":"GitHub Actions"},{"href":"/en/enterprise-cloud@latest/actions/concepts","title":"Concepts"},{"href":"/en/enterprise-cloud@latest/actions/concepts/security","title":"Security"}],"documentType":"subcategory"},"body":"# Security in GitHub Actions\n\nLearn about security as a concept in GitHub Actions.\n\n## Links\n\n* [Secrets](/en/enterprise-cloud@latest/actions/concepts/security/secrets)\n\n  Learn about secrets as they are used in GitHub Actions workflows.\n\n* [GITHUB\\_TOKEN](/en/enterprise-cloud@latest/actions/concepts/security/github_token)\n\n  Learn what GITHUB\\_TOKEN is, how it works, and why it matters for secure automation in GitHub Actions workflows.\n\n* [OpenID Connect](/en/enterprise-cloud@latest/actions/concepts/security/openid-connect)\n\n  OpenID Connect allows your workflows to exchange short-lived tokens directly from your cloud provider.\n\n* [Artifact attestations](/en/enterprise-cloud@latest/actions/concepts/security/artifact-attestations)\n\n  Understand the usage and security benefits of artifact attestations.\n\n* [Script injections](/en/enterprise-cloud@latest/actions/concepts/security/script-injections)\n\n  Understand the security risks associated with script injections and GitHub Actions workflows.\n\n* [Compromised runners](/en/enterprise-cloud@latest/actions/concepts/security/compromised-runners)\n\n  Understand the security risks associated with compromised GitHub Actions runners.\n\n* [Kubernetes admissions controller](/en/enterprise-cloud@latest/actions/concepts/security/kubernetes-admissions-controller)\n\n  Understand how you can use an admissions controller to enforce artifact attestations in your Kubernetes cluster."}