--- title: Medium | daily.dev description: Docker now supports OIDC connections for authenticating to Docker Hub from GitHub Actions, replacing long-lived static Organization Access Tokens (OAT).... canonical: https://daily.dev/posts/medium-ir3yfs5mk twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Medium | daily.dev og:description: Docker now supports OIDC connections for authenticating to Docker Hub from GitHub Actions, replacing long-lived static Organization Access Tokens (OAT).... og:url: https://daily.dev/posts/medium-ir3yfs5mk og:image: https://api.daily.dev/og/posts/ir3yfs5mk.png og:image:alt: Medium og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Medium **[ITNEXT](https://daily.dev/sources/itnext)** · 3 min read · 0 upvotes · 0 comments ## Summary Docker now supports OIDC connections for authenticating to Docker Hub from GitHub Actions, replacing long-lived static Organization Access Tokens (OAT). Available for Docker Team, Business, and DSOS plan users as of July 21st 2026, the new approach uses short-lived tokens (5 min to 1 hour) via the docker/oidc-action or directly through docker/login-action v4.5.0+. Code examples show both the old static token approach and the new OIDC-based workflow for both docker/login-action and docker/github-builder, improving security posture by eliminating persistent credentials. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Docker OIDC connections for GitHub Actions available for Docker Orgs](https://daily.dev/posts/docker-oidc-connections-for-github-actions-available-for-docker-orgs-evgg1hfna) · Docker · 0 upvotes · 0 comments - [Replace Docker Access Tokens in GitHub Actions with an OIDC Connection — Nick Janetakis](https://daily.dev/posts/replace-docker-access-tokens-in-github-actions-with-an-oidc-connection-nick-janetakis-q9asfbvcc) · Nick Janetakis · 0 upvotes · 0 comments - [Native OIDC Token Exchange for Pulumi CLI](https://daily.dev/posts/native-oidc-token-exchange-for-pulumi-cli-bcpcer7ek) · Pulumi · 2 upvotes · 0 comments - [OIDC support for Dependabot and code scanning](https://daily.dev/posts/oidc-support-for-dependabot-and-code-scanning-last0d8xa) · GitHub Changelog · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#docker](https://daily.dev/tags/docker), [#cicd](https://daily.dev/tags/cicd), [#authentication](https://daily.dev/tags/authentication), [#github-actions](https://daily.dev/tags/github-actions) [View this post on daily.dev](https://daily.dev/posts/medium-ir3yfs5mk) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Medium","url":"https://daily.dev/posts/medium-ir3yfs5mk","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/medium-ir3yfs5mk"},"datePublished":"2026-07-26T17:13:56.994Z","dateModified":"2026-07-26T17:14:19.981Z","description":"Docker now supports OIDC connections for authenticating to Docker Hub from GitHub Actions, replacing long-lived static Organization Access Tokens (OAT)....","image":"https://media.daily.dev/image/upload/s--qPvKM23u--/f_auto/v1722860399/public/Placeholder%2009","thumbnailUrl":"https://media.daily.dev/image/upload/s--qPvKM23u--/f_auto/v1722860399/public/Placeholder%2009","isAccessibleForFree":true,"articleSection":"ITNEXT","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"ITNEXT","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/itnext2","url":"https://daily.dev/sources/itnext"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/medium-ir3yfs5mk","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,docker,cicd,authentication,github-actions","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"ITNEXT","item":"https://daily.dev/sources/itnext"},{"@type":"ListItem","position":3,"name":"Medium"}]} ```