# Security in GitHub Actions

Learn about security as a concept in GitHub Actions.

## Links

* [Secrets](/en/actions/concepts/security/secrets)

  Learn about secrets as they are used in GitHub Actions workflows.

* [GITHUB\_TOKEN](/en/actions/concepts/security/github_token)

  Learn what GITHUB\_TOKEN is, how it works, and why it matters for secure automation in GitHub Actions workflows.

* [OpenID Connect](/en/actions/concepts/security/openid-connect)

  OpenID Connect allows your workflows to exchange short-lived tokens directly from your cloud provider.

* [Artifact attestations](/en/actions/concepts/security/artifact-attestations)

  Understand the usage and security benefits of artifact attestations.

* [Script injections](/en/actions/concepts/security/script-injections)

  Understand the security risks associated with script injections and GitHub Actions workflows.

* [Compromised runners](/en/actions/concepts/security/compromised-runners)

  Understand the security risks associated with compromised GitHub Actions runners.

* [Kubernetes admissions controller](/en/actions/concepts/security/kubernetes-admissions-controller)

  Understand how you can use an admissions controller to enforce artifact attestations in your Kubernetes cluster.