megachangelog
Feature

Push images to Vercel Container Registry from GitHub Actions

You can now push container images from GitHub Actions to Vercel Container Registry using GitHub OIDC authentication, eliminating the need for long-lived registry credentials. The vercel/vcr-action/login action exchanges your workflow's OIDC token for a short-lived Vercel access token that is automatically revoked when the job ends.

You can now push container images from GitHub Actions to (VCR) without storing long-lived registry credentials.Vercel Container Registry

The new action authenticates your workflow using GitHub OIDC. It exchanges the workflow’s OIDC token for a short-lived Vercel access token, then uses that token to log in to . When the job ends, the action logs out and revokes the Vercel token.vercel/vcr-action/loginvcr.vercel.com

To start:

Then add the login step before you build and push and the image:

The action authenticates Docker by default. Pass to use Podman or Buildah instead.engines

After VCR finishes preparing a image, you can use it as a custom . Within the same project, reference it as .linux/amd64<repository>:<tag>Vercel Sandbox image

Learn more in the and the .VCR documentationGitHub Actions guide

Read more

  • Create an on your Vercel team that matches the GitHub repository and workflow, and grants read-write access to VCR.OIDC policy

  • Store your Vercel team ID as a GitHub repo variable, for example , along with the team slug, project slug, and repo name used in the image tag.VERCEL_TEAM_ID

  • Give the workflow or job permission.id-token: write

vcrcontainer-registrygithub-actionsci-cdsecurity

Source: original entry ↗

More from Vercel

Follow Vercel to get its new changes in your feed and email digest.

Announcement2026.10.19

Updates to Hobby and Pro Terms of Service

Vercel is updating Terms of Service for Hobby and Pro customers effective October 19, 2026, clarifying credit policies, managed accounts, auto-renewal practices, and adding statutory cancellation and refund rights for UK and EU consumers, including protections for service changes with negative impact.

termsbillingcreditspolicylegal
Announcement

Mercury 3 now available on AI Gateway

Inception's Mercury 3 model is now available on Vercel's AI Gateway with 50% launch pricing and generation speeds exceeding 1,000 tokens per second. The model enables parallel text refinement with a 1M-token context window, ideal for real-time applications like browser agents and customer support.

ai-gatewaymodelsinferencellmlaunch
Announcement

MiniMax M3.1 Flash now available on AI Gateway for free

MiniMax M3.1 Flash, an open-weight multimodal model with 1M-token context window for coding and agentic work, is now available on Vercel's AI Gateway at no cost through October 20. The model excels at complex agent tasks, coding applications, and cybersecurity work, and can be used through multiple APIs and coding agents.

ai-gatewaymodelscodingagentsapi
See all Vercel changes →