Vercel Security Review now scans unlinked GitHub repositories

·2026.11.13 09:00

Key point

The feature automatically triggers vulnerability checks on code pushes in repositories not yet linked to a Vercel project.

Details

  • Vercel Security Review now scans code changes in GitHub repositories that have not been linked to a Vercel project.
  • By default, the feature covers all unlinked repositories accessible by the Vercel GitHub App in a connected account.
  • Users can limit coverage to specific connected accounts or individual repositories via Agent settings.
  • Reviews check commits directly without requiring a deployment, though linked projects with deployments use additional context.
  • Setup requires connecting the account in team Git settings and enabling the feature in Vercel Agent settings.

This summary was generated automatically by AI. Check the original for the author's claims and context. Copyright belongs to the original author.

Our guide explains how the AI works. Report summary errors, attribution issues, or removal requests via Contact.