Vercel demands OIDC from its partners while its own GitHub Actions pipeline still needs a static token
On October 22, 2026, Vercel declared static credentials dead after surveying more than 1,000 SaaS vendors and finding only 8.4% support OIDC authentication. Two Marketplace deadlines are now set, yet Vercel’s official GitHub Actions deployment guide still requires a long-lived token.