Push images to Quay without a password

199 · Red Hat · July 22, 2026, 4:30 a.m.
Summary
This post explains how to securely push container images to Quay using OpenID Connect (OIDC) without needing to manage long-lived secrets or API keys. It outlines the steps to create a robot account in Quay, set up OIDC federation with GitHub, and implement a GitHub Actions workflow to automate the image pushing process. The method enhances security by using short-lived tokens instead of permanent credentials, simplifying CI/CD workflows.