Summary
On July 30, 2026, Vercel added OpenID Connect (OIDC) support to Turborepo and Vercel Remote Cache, letting CI/CD workflows authenticate to the Remote Cache with short-lived OIDC tokens instead of long-lived cache tokens.
What changed
Teams can now configure OIDC policies so CI/CD pipelines exchange their provider's OIDC identity for access to Vercel Remote Cache, replacing static long-lived tokens for Turborepo cache reads and writes in automated builds.
Why it matters
Long-lived cache tokens in CI are a common secret-sprawl and leakage risk; OIDC federation removes them in favor of workload identity that expires automatically. It brings Turborepo's cache access in line with the keyless CI patterns already standard in GitHub Actions and cloud IAM, reducing a real attack surface for monorepo teams.
Evidence excerpt
Turborepo and Vercel Remote Cache now support OpenID Connect (OIDC), so teams can configure OIDC policies for CI/CD workflows accessing Vercel Remote Cache.