workload-identity-federation
Verify OIDC JWT identity tokens using OIDC discovery
Cited, versioned conformance vectors for CI/CD OIDC trust decisions - the answer key for 'does subject S satisfy trust condition C, and is C safe?' across GitHub/GitLab issuers and AWS/Azure/GCP consumers.
