Trigger.dev Deployment Guard

Security gate that prevents secrets and API keys from being committed to Git or deployed. This check is MANDATORY before any commit, push, or deploy in a Trigger.dev project.

When to Use

• Before running npx trigger.dev deploy
• Before committing code in a project that contains trigger.config.ts
• Before pushing code to a remote repository
• When the user asks to "deploy", "go live", "push", or "commit" in a Trigger.dev project
• When creating a new Trigger.dev project (to ensure secure setup)

Security Check Process

Step 1: Secret Scan

Use the Grep tool to scan ALL project files (excluding node_modules/, package-lock.json, .git/) for these patterns: