← Project Overviews

SECURITY · AUTOMATION · LEADERSHIP

JIT PAM GitHub NHI

A just-in-time privileged access exploration for GitHub non-human identities and safer automation.

Open source repositoryAll project overviews

Pain point

Long-lived tokens and broad machine identity permissions increase blast radius, audit burden, and operational risk.

Solution

Issue narrowly scoped access for a bounded task, expire it quickly, capture evidence, and revoke it automatically.

Architecture

  1. Workload request
  2. Policy and approval
  3. Ephemeral credential
  4. Revoke and audit

Software stack

GitHub APIsOIDC or workload identityPAM policyAudit eventsAutomation runner

AI and AgenticOps

AI can explain access intent, but AgenticOps must enforce least privilege, short TTLs, approval boundaries, secret hygiene, and complete auditability.