Deploy Token - CI/CD Glossary Definition
A deploy token is a purpose-built credential scoped to a single capability (such as pushing to a registry or reading a package feed), used by pipelines instead of a personal account so access is auditable and revocable.
Where this shows up in a real pipeline
A definition is only useful if you can recognise the thing in your own logs. In practice this concept surfaces when a job behaves differently between a local run and a runner, which is where most CI debugging starts.
- Compare a local run against a CI run of the same command before assuming a tool is at fault.
- Runner environments differ in shell, PATH, TTY availability, available memory, and disk. Most CI-only behaviour traces to one of those five.
- Pin tool versions so an environment difference cannot be introduced by an unrelated update.
Frequently asked questions
What is Deploy token?
A deploy token is a purpose-built credential scoped to a single capability (such as pushing to a registry or reading a package feed), used by pipelines instead of a personal account so access is auditable and revocable.