Accidentally shared .vercel folder, anything to be concerned about?
Unanswered
Cynipid gall wasp posted this in #help-forum
Cynipid gall waspOP
Hi, I accidentally shared my .vercel folder which contains a project.json file with a "projectId" and "orgId". The readme file describes these as the following:
My question is if there is anything to be overly alarmed about and if so what could I do about it? Should I create a new vercel app and redeploy my git repo? How do I handle this situation.
> Why do I have a folder named ".vercel" in my project?
The ".vercel" folder is created when you link a directory to a Vercel project.
> What does the "project.json" file contain?
The "project.json" file contains:
- The ID of the Vercel project that you linked ("projectId")
- The ID of the user or team your Vercel project is owned by ("orgId")
> Should I commit the ".vercel" folder?
No, you should not share the ".vercel" folder with anyone.
Upon creation, it will be automatically added to your ".gitignore" file.My question is if there is anything to be overly alarmed about and if so what could I do about it? Should I create a new vercel app and redeploy my git repo? How do I handle this situation.
1 Reply
In my observation, there’s no sensitive data in .vercel such as tokens or API keys (in a new project), so it should be technically fine.
If you want to remove it from git history, read https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/removing-sensitive-data-from-a-repository
If you want to remove it from git history, read https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/removing-sensitive-data-from-a-repository