Deployments can now require cryptographically-verified commits
By Steven Van ·
The GitHub-only setting cancels deployments for any commit GitHub hasn't cryptographically verified.
Deployments from GitHub-connected Vercel projects can now be restricted to commits that GitHub has cryptographically verified. The setting is off by default and is enabled per project under Settings, Git, Require Verified Commits.
Once enabled, Vercel only creates a deployment for commits GitHub has verified; any other commit has its deployment automatically cancelled. The feature is available for GitHub projects only.
Vercel
The platform for frontend developers — deploy, preview, and scale web apps and AI agents with zero config.
View Vercel →