Rather than using long-lived API tokens when publishing software packages, an OIDC identity token can be exchanged for a ...