megachangelog
Security

Turborepo and Vercel Remote Cache now support OpenID Connect (OIDC)

Turborepo and Vercel Remote Cache now support OIDC token exchange from CI/CD workflows, allowing short-lived access tokens instead of long-lived Personal Access Tokens. OIDC tokens are more secure, scoped only to Remote Cache, and associated with teams rather than individuals.

You can now exchange OIDC tokens from CI/CD workflows, including , for short-lived access tokens.GitHub workflowsTurborepo

These tokens grant access to , and are a more secure alternative to long-lived Personal Access Tokens (PATs). OIDC tokens are short-lived, only grant access to Vercel Remote Cache, and are associated with your Vercel team, rather than a specific team member. Vercel's Remote Cache

We recommend all customers migrate their CI/CD workflows from PATs to OIDC.

Get started by adding a under Settings → Build and Deployment → and learn more in the .Turborepo OIDC policyOIDC Policies for CLI Accessdocumentation

Read more

securityoidcauthenticationci-cdturboreporemote-cache

Source: original entry ↗