TODO: design out this should work, probably we can use OIDC from Github Actions, and similar features from Gitlab.