Building a Self-Hosted Secrets Platform With OIDC, Not Long-Lived Tokens
Moving away from per-repository GitHub Secrets, I self-hosted Infisical and rebuilt how my projects authenticate to it, using OIDC-issued, short-lived credentials scoped per application instead of static tokens sitting in CI.








