Security

Customer security is paramount to Buildkite. Buildkite Package Registries provides mechanisms to restrict access to your registries from Buildkite Agents and their pipeline's jobs, as well as other third-party systems that can issue Open ID Connect (OIDC) tokens.

This section contains the following topics:

• OIDC with Buildkite Package Registries and how to restrict access to registries through OIDC policies.
• User, team, and registry permissions and how to manage team and user access to registries.
• SLSA provenance and how to publish packages and other artifact types to registries with SLSA provenance.