More detail on blog post "Dependabot now supports OIDC authentication"

[matthew-ryan-sp]

I am looking for more details on a recent GitHub blog post. The post is titled Dependabot now supports OIDC authentication from February 3rd, 2026. It details integration between Dependabot and AWS CodeArtifact. I am trying to implement this currently. The documentation linked from the post does not appear updated yet. Any recommendations?

[dev-bio]

There's currently zero documentation on this, but managed to find what's required in the recently open sourced proxy used by Dependabot.

[rosswarren]

@dev-bio did you actually get that working in dependabot.yml? I can't get past The property '#/registries/codeartifact/' of type object did not match one or more of the required schemas when trying fields other than tenant-id and client-id.

[aseppala]

I have the same problem. However, docs have arrived: https://docs.github.com/en/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/configuring-access-to-private-registries-for-dependabot#aws-codeartifact