I think it’s premature before a lot of tools improve to make that more workable: for example, if you use AWS how realistic is maintain separate IAM for each tool you run and map the right one into a sandbox for each tool? To use your editor’s GitHub integration with a token which can do basic operations and only retrieves a high-privilege token with a hardware presence check when you cut a release?
Theoretically you can do it but the friction is enough to make it non-viable.
Theoretically you can do it but the friction is enough to make it non-viable.