# Vercel adds short-lived registry login for GitHub Actions

_Published Friday, September 25, 2026 at 10:07 PM EDT · Security, Infrastructure · Latest · Tier 2 — Notable_

![Vercel adds short-lived registry login for GitHub Actions — Primary](https://assets.vercel.com/image/upload/contentful/image/e5382hct74si/6siAiUHRqlELxRxuBNx5bM/31e468395954ea7df615a11a351e763e/vcr_gh_-_og.png)

Vercel says developers can now push container images from GitHub Actions to its Container Registry without storing a long-lived registry credential. A new login action exchanges a GitHub workflow identity token for a short-lived Vercel access token, uses it to authenticate the build and revokes it when the job ends.

Teams must create a Vercel policy matching the repository and workflow and grant it registry write access. The change lets automated builds publish images for use in Vercel Sandbox while limiting how long the registry credential remains valid.

## Sources

- [Vercel News](https://vercel.com/changelog/vcr-login-github-action)

---
Canonical: https://techandbusiness.org/newswire/qXZGuWNtmPV1yYKNOKiqL8
Published: 2026-09-26T02:07:42.672Z
Story chronology: 2026-09-25T09:15:00.000Z
Retrieved: 2026-09-26T03:53:33.073Z
Publisher: Tech & Business (techandbusiness.org)