Quiz — Question 1

You are an architect at Cymbal Bank configuring a new CI/CD pipeline hosted on GitHub Actions. The pipeline needs permission to push container images into Google Cloud Artifact Registry. Your CISO has mandated a strict "no long-lived secrets" policy, meaning you cannot generate and download a JSON service account key.

Which solution should you implement?