OIDC in GitHub Actions

Instead of using static credentials, you can use OIDC, which creates a user that can securely request short-lived credentials to act.

https://www.leebriggs.co.uk/blog/2022/01/23/gha-cloud-credentials.html

github docs: https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect