I was shocked to read such a thing in 2025 but either there is some nuance to your observation or your information is outdated https://goharbor.io/docs/2.13.0/administration/#:~:text=or%2...
If you can find an example of OIDC with Github Actions and Harbor I'd love to see it.