You can now exchange OIDC tokens from CI/CD workflows, including GitHub workflows, for short-lived Turborepo access tokens.

These tokens grant access to Vercel's Remote Cache, and are a more secure alternative to long-lived Personal Access Tokens (PATs). OIDC tokens are short-lived, only grant access to Vercel Remote Cache, and are associated with your Vercel team, rather than a specific team member.

We recommend all customers migrate their CI/CD workflows from PATs to OIDC.

Get started by adding a Turborepo OIDC policy under Settings → Build and Deployment → OIDC Policies for CLI Access and learn more in the documentation.