Skip to content

Switch to OIDC for Chainguard Authentication once Chainguard supports GitLab multi-level nested groups

Spawned from this comment: !734 (comment 2099365956)

Posted in Slack: https://gitlab.slack.com/archives/C04ND7RPNFP/p1726036914656379?thread_ts=1726036809.351899&cid=C04ND7RPNFP

For OIDC: Chainguard doesn't appear to support multi-level nested namespaces in GitLab, and assumes flat namespaces like GitHub.

When referencing a deep project it returns an error: Error: project-path must be in the form 'group-name/project-name'.

Until this is fixed, we need to use long-lived tokens. Once this is fixed, we should adopt OIDC.