vercel-deploy-integration
Warn
Audited by Socket on Sep 9, 2026
1 alert found:
AnomalyAnomalyreferences/google-cloud-run.md
LOWAnomalyLOW
references/google-cloud-run.md
The fragment is deployment infrastructure, not apparent malware. The primary security concerns are public unauthenticated exposure, possible accidental inclusion of sensitive files in the Docker build context, unquoted shell variables, and use of the mutable latest secret version. The hardcoded region "None" is likely a configuration error that may prevent deployment. Restrict authentication unless public access is intentional, quote variables, validate the project and region, use a pinned secret version, and provide a restrictive .dockerignore.
Confidence: 98%Severity: 62%
Audit Metadata