SecurityThe New Stackabout 1 hour ago
Vercel Bans Static Credentials by 2027
3 min read
Vercel mandates that Marketplace vendors adopt secure authentication by January 2027 or face delisting. CTO Malte Ubl cites a survey of over 1,000 SaaS vendors showing only 8.4% support secure methods. The company pushes OpenID Connect to replace static keys, though its own GitHub Actions workflow still relies on persistent VERCELTOKEN secrets until full OIDC support arrives.
Level
Hype check
Tap to vote and see what everyone thinks.
