Post #2869145

@kaleissin@wandering.shop yes, that's also one approach, which assumes you have another way to secure long-lived credentials instead of trusting a third party to generate a short-lived, minimally scoped token. Teams that publish from a CI/CD provider have a better option than storing long-lived tokens.