Trusted Sources for Deployment Protection

Trusted Sources is a Vercel feature that secures deployments using short-lived OIDC identity tokens instead of long-lived secrets.

• •Eliminates the need for permanent Protection Bypass for Automation secrets in deployment protection
• •Verifies OIDC token signatures and validates configured claims before allowing access
• •Enables Vercel projects within the same team to authorize each other for cross-project deployments
• •Supports external OIDC providers like GitHub Actions for CI/CD pipeline integration
• •Requires attaching OIDC tokens in the x-vercel-trusted-oidc-idp-token header for authenticated requests

This summary was automatically generated by AI based on the original article and may not be fully accurate.