# GitLab CI OIDC trust relationships (https://depot.dev/changelog/2026-07-07-gitlab-oidc-trust-relationships)

> Published 2026-07-07

Depot now supports OIDC trust relationships for GitLab CI. You can configure a Depot project to trust a GitLab namespace and project, then use GitLab's short-lived ID tokens to authenticate `depot build` without storing a static Depot token in CI variables.

In your GitLab job, request an ID token named `DEPOT_OIDC_TOKEN` with `aud: https://depot.dev`; the Depot CLI will exchange it automatically when it runs in GitLab CI.

```yaml
build-image:
  id_tokens:
    DEPOT_OIDC_TOKEN:
      aud: https://depot.dev
  script:
    - depot build .
```

See the [GitLab CI integration guide](/docs/container-builds/integrations/gitlab-ci) and [OIDC trust relationship docs](/docs/cli/authentication#oidc-trust-relationships) for setup steps.

## For AI Agents

The full site index is at [llms.txt](https://depot.dev/llms.txt). Append `.md` to any documentation, blog, changelog, or customer URL to fetch its markdown source directly.