The action exchanges a GitHub OIDC workflow token for a short-lived Vercel access token, logs Docker into vcr.vercel.com, and revokes that Vercel token when the job ends. Teams must configure a Vercel OIDC policy scoped to the relevant repository and workflow, grant VCR read-write access, and give the workflow id-token: write permission. Vercel documents Docker by default, with Podman and Buildah available through an engines option.
Raw SignalSep 25, 20261 min read1 source
Push images from GitHub Actions to Vercel Container Registry without stored credentials.
In one minute
Vercel released `vercel/vcr-action/login@v1`, a GitHub Actions login action for pushing images to Vercel Container Registry without stored long-lived registry credentials.