Security

Customer security is paramount to Buildkite. Buildkite Package Registries provides mechanisms to restrict access to your registries from Buildkite agents and their pipeline's jobs, as well as other third-party systems that can issue Open ID Connect (OIDC) tokens.

For security controls across your Buildkite organization, see the Security checklist. If registry access or credentials may be compromised, follow Incident response.

This section contains the following topics:

• OIDC with Buildkite Package Registries and how to restrict access to registries through OIDC policies.
• User, team, and registry permissions and how to manage team and user access to registries.
• SLSA provenance and how to publish packages and other artifact types to registries with SLSA provenance.