# google-github-actions/auth

A GitHub Action for authenticating to Google Cloud.

Repository: https://github.com/google-github-actions/auth
Canonical: https://ross.abutalabs.com/products/auth
Homepage: https://cloud.google.com/iam
Language: TypeScript
License: Apache-2.0
License Family: permissive
Topics: github-actions, security, google-cloud, identity, actions, google-cloud-platform, iam, gcp, authentication
Last push: 2026-07-29T20:24:41+00:00

## Health v2 (maintenance only)
Score: 78/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 95, release rhythm 45, longevity 100
- inputs: {"age_days": 1812, "days_push": 35, "days_rel": 365, "gap_med": 27, "n_releases_24m": 10}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1371, forks 301 (observed 2026-08-28T04:04:31.917127+00:00)

## What it is
A GitHub Action that authenticates GitHub Actions workflows to Google Cloud, supporting Workload Identity Federation and Service Account Key JSON. It exports credentials for use by gcloud and other Google Cloud tools in CI pipelines.

## Use cases
- authenticate to google cloud from github actions
- set up workload identity federation for ci deployments
- avoid storing gcp service account keys in github secrets
- deploy to gcp from github workflows
- generate short-lived gcp credentials in ci

## When to choose
- your CI/CD runs on GitHub Actions and deploys to or interacts with Google Cloud
- you want keyless authentication via Workload Identity Federation instead of long-lived service account keys

## When to avoid
- your CI runs outside GitHub Actions
- you need gsutil compatibility, since it ignores credentials exported by this action
- you use Firebase Admin SDK, which does not support Workload Identity Federation tokens from this action

## Facets
- artifact type: plugin
- maturity: active
- function: auth, ci-cd, security
- domain: cloud-computing, security, developer-tools
- platform: cloud, cli
- tags: github-actions, google-cloud, workload-identity-federation, gcp, iam, oidc, devops, nodejs

## Member repositories
- google-github-actions/auth (main) score 78

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:31.917127+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:40:50.215956+00:00, confidence not recorded.
  - readme: https://github.com/google-github-actions/auth (fetched 2026-08-28T04:04:31.917127+00:00, sha adb5f11e5fec)
  - homepage: https://cloud.google.com/iam (fetched 2026-08-29T11:57:47.055992+00:00, sha 6ab0c360f088)
- Data as of 2026-08-30T08:39:29.467469+00:00.