Vercel 新增安全功能：現可要求部署必須使用經密碼學驗證的 Commit
Original: Deployments can now require cryptographically-verified commits
In modern software development workflows, a Git commit's author identity is surprisingly easy to forge — a developer simply needs to change…
Vercel 新增了一項安全防護功能，現在團隊可以強制要求所有觸發部署的 Git Commit 必須經過密碼學驗證（如 GPG、SSH 或 S/MIME 簽署）。這項功能旨在防止惡意第三方偽造開發者身分提交程式碼，進而觸發未授權的自動部署，能有效提升團隊的軟體供應鏈安全與 CI/CD 流程的可靠性。
In modern software development workflows, a Git commit's author identity is surprisingly easy to forge — a developer simply needs to change the email in their local Git config. To guard against this potential security vulnerability, frontend deployment platform Vercel has announced a brand-new security feature that allows projects and teams to enforce a requirement that "deployments must use cryptographically-verified commits."
Free shows the 3-line summary; Pro unlocks the full deep summary (~300 words) so you never have to click through.
See Pro plans →Want the original English / full article?
Read on Vercel Changelog →Summaries are AI-generated; the original article is authoritative.