Vercel
5/13/2026

Trusted Sources for Deployment Protection
Short summary
Vercel's Trusted Sources feature lets deployments securely authenticate requests from other Vercel projects and external services using short-lived OIDC tokens instead of long-lived secrets. Configure custom rules to authorize specific projects, teams, or services like GitHub Actions. This replaces the legacy Protection Bypass for Automation approach.
- •Use short-lived OIDC tokens instead of long-lived secrets for deployment authentication
- •Authorize Vercel projects from the same or different teams, plus external services
- •More secure alternative to the older Protection Bypass for Automation method
Generated with AI, which can make mistakes.
Is this a good recommendation for you?



