gcloud authentification with service account

Hi community,

we are trying to check our google storage buckets using ready api. For this we need a token to access the gcs. It works on my local machine inserting my personal token directly in the oauth token field

but, as you might understand, I don't want this to be stored in any gitlab pipeline or log file. Has any body already gathered experience with connection rap to the google storage, and has come across a solution for automatic token generation?