March 2024 Summaries

RWX has added Depot as a Trusted Relationship, enabling CI workflows to authenticate with Depot through OIDC tokens that are short-lived and unique to each RWX run. Because CI platforms typically use ephemeral virtual machines, Docker image builds can lose the performance benefits of persistent caching; Depot addresses this by providing remote Docker builders with persistent caches. To use the integration, teams configure a Depot OIDC token in an RWX Vault, set Depot to trust RWX by entering the vault’s OIDC subject in Depot settings, install the Depot CLI in an RWX task, and supply the vault-generated token as the DEPOT_TOKEN environment variable when running depot build. Vault access can be tailored for feature branches or protected branches, and users can contact RWX or Depot support for help.