vercel-deploy-integration

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Anomaly
AnomalyLOW
references/google-cloud-run.md

The fragment is deployment infrastructure, not apparent malware. The primary security concerns are public unauthenticated exposure, possible accidental inclusion of sensitive files in the Docker build context, unquoted shell variables, and use of the mutable latest secret version. The hardcoded region "None" is likely a configuration error that may prevent deployment. Restrict authentication unless public access is intentional, quote variables, validate the project and region, use a pinned secret version, and provide a restrictive .dockerignore.

Confidence: 98%Severity: 62%
Audit Metadata
Analyzed At
Sep 9, 2026, 03:53 AM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Ftons-of-skills-marketplace%2Fvercel-deploy-integration%2F@e8ad515f8cc4dc6ef4d2142a5d5d6156dc71cc62d029ac68ff087a129c967fdb