Skip to content
Trending storyDeveloping

Formal uses OIDC to control cloud agents' production access

1 report1 sourceupdated 2 hours ago

What happened

AI digest

Formal uses OIDC to give cloud coding agents access to production data and cloud infrastructure without handing out long-lived credentials, reported on Hacker News. Access runs through an auditable, policy-controlled process, production access stays read-only, and human approval is required. An agent can request short-term database permission through Slack; once approved, the grant is limited to a specific session and database, and request logs tie the agent to the engineer who asked.

Written by AI from the coverage · updated 52 minutes ago

Coverage

Follow the reports to see the story from different sides.

Oct 28
  1. Hacker News front page
    We let our cloud agents query prod (with OIDC, not secrets)

    Formal 使用 OIDC 为云端编码智能体提供可审计、受策略控制的生产数据与云基础设施访问,生产访问保持只读且需人工审批。智能体可通过 Slack 申请短期数据库权限,批准后授权限定到具体会话和数据库,请求日志关联智能体及发起工程师。

Heat over time

Not enough continuous observations to draw a trend yet.