ai-setup-oidc

Configure AWS OIDC trust policies for GitHub Actions repositories.

1|Updated Apr 2, 2026
One-click install
npx skills add https://github.com/svange/augint-shell --skill ai-setup-oidc
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ai-setup-oidc
Source: https://github.com/svange/augint-shell/tree/main/.agents/skills/ai-setup-oidc
Command: npx skills add https://github.com/svange/augint-shell --skill ai-setup-oidc

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Streamlines configuring GitHub Actions AWS OIDC trust policies by automatically detecting repo type and updating trust conditions.

Core Features & Use Cases

  • Automatically detect repo type (library vs service) based on dev branch presence.
  • Locate OpenID Connect provider and trust relationships and adjust IAM roles accordingly.
  • Support interactive and non-interactive usage with --profile and --check-only.

Quick Start

Run ai-setup-oidc to detect your repo and fix the GitHub Actions OIDC trust policy.

Frequently Asked Questions about ai-setup-oidc

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure AWS OIDC trust policies for GitHub Actions?

The tool automates AWS OIDC trust policy configuration by detecting your repository type, locating the OIDC provider, identifying IAM roles, and updating trust conditions for main and dev branches accordingly.

What is the difference between library and service repos when setting up OIDC for AWS?

When setting up OIDC for AWS, the tool detects repo type by checking for a dev branch, automatically updating trust conditions for both main and dev branches in service repos, while handling libraries differently based on branch presence.

Can I check AWS IAM role trust relationships without applying changes?

Yes, you can validate AWS IAM role trust relationships without applying changes by using the --check-only flag, which locates the OIDC provider and inspects roles without modifying trust conditions.

Do I need AWS credentials to automate GitHub Actions OIDC trust policy updates?

Yes, you need valid AWS credentials to automate GitHub Actions OIDC trust policy updates, as the tool requires and validates them to locate the OIDC provider and modify IAM role trust conditions.

How does automated OIDC trust policy configuration handle multiple branches?

Automated OIDC trust policy configuration detects dev branch presence and updates IAM role trust conditions for both main and dev branches when present, ensuring proper GitHub Actions access across environments.

What's the best way to update IAM roles for GitHub Actions OIDC across multiple repositories?

The best way to update IAM roles for GitHub Actions OIDC across repositories is an automated approach that detects repo types, validates AWS credentials, and applies trust condition updates for main and dev branches.