Vercel adds short-lived registry login for GitHub Actions

Vercel says developers can now push container images from GitHub Actions to its Container Registry without storing a long-lived registry credential. A new login action exchanges a GitHub workflow identity token for a short-lived Vercel access token, uses it to authenticate the build and revokes it when the job ends. Teams must create a Vercel policy matching the repository and workflow and grant it registry write access. The change lets automated builds publish images for use in Vercel Sandbox while limiting how long the registry credential remains valid.