Avoiding plain text password for generating token

I’m using a third party enterprise tool for an automated job (create key cloak role, assign role as composite role). First, I generate the token following instructions shown below to use for other API requests

POST {url}/realms/master/protocol/openid-connect/token
username=admin&password=admin&client_id=admin-cli&grant_type=password

However, I do not want to put my password in plain text. Since this “job” configuration will be in some git repo. Is there anyway to avoid this?

I’m thinking something along the lines of generating a timed token in the Admin console manually and then manually inputting it into my “job”. Any ideas?