Authenticate to the PlanetScale API with OpenID Connect
You can now authenticate to the PlanetScale API from GitHub Actions and Depot CI using OpenID Connect (OIDC). Workflows will exchange their OIDC token for a short-lived service token, so you no longer need to store long-lived credentials in your CI secrets.
Organization admins create a trust policy in the dashboard that defines the claims a workflow must present, such as a repository or branch, along with the access to grant and how long the service token lasts. The new planetscale/auth-action handles the exchange for you in a workflow job with the id-token: write permission.