Deploy without a secret (OIDC)
Let a GitLab CI or GitHub Actions pipeline open a session on your tenant with its OIDC token, without a stored token.
GitLab CI
A complete GitLab pipeline — install the CLI, validate on every branch, deploy on main with OIDC.
GitHub Actions
A complete GitHub Actions workflow — install the CLI, validate on pull requests, deploy on main with OIDC.
Build and push images
Push your CI images to the tenant's registry with the job's OIDC session, then deploy them.