---
id: 20260926-T0-11
title: "Vercel推出无密钥容器镜像推送方案"
title_en: "Vercel Adds Keyless Container Image Push from GitHub Actions"
url: https://ai.daily.yangsir.net/daily/20260926-T0-11
issue_date: 2026-09-26
publish_date: 2026-09-25T09:15:00.000Z
category: release
source_name: "Vercel Blog"
source_url: https://vercel.com/changelog/vcr-login-github-action
---

# Vercel推出无密钥容器镜像推送方案

Vercel发布新的vercel/vcr-action/login操作，允许开发者直接从GitHub Actions推送容器镜像至Vercel Container Registry（VCR），无需存储长期有效的注册表凭证。该操作通过GitHub OIDC验证工作流身份，将工作流的OIDC令牌交换为短期有效的Vercel访问令牌，完成认证。这一更新简化了CI/CD流程中的密钥管理，降低了凭证泄露风险，开发者可以在GitHub Actions中安全地构建并推送镜像到Vercel，无需手动配置和轮换长期密钥。

## English Version

**Vercel Adds Keyless Container Image Push from GitHub Actions**

Vercel introduced a new vercel/vcr-action/login action that lets developers push container images from GitHub Actions to Vercel Container Registry (VCR) without storing long-lived registry credentials. The action authenticates workflows using GitHub OIDC, exchanging the workflow's OIDC token for a short-lived Vercel access token. This update simplifies CI/CD secret management and reduces credential leak risks, enabling developers to securely build and push images to Vercel directly from GitHub Actions without manually configuring or rotating long-term keys.

---

**来源**：[Vercel Blog](https://vercel.com/changelog/vcr-login-github-action)

**详情页**：https://ai.daily.yangsir.net/daily/20260926-T0-11

---

*智语观潮 · Daily — https://ai.daily.yangsir.net/llms.txt*