Deployment config security (vercel.json, fly.toml, railway)
Platform configuration files can inadvertently expose admin routes, disable authentication on certain paths, or set permissive rewrites that bypass middleware. Misconfigured headers or redirects in these files are invisible during local development.
HOW VIBECHECK DETECTS THIS
vibecheck clones your repository and runs Gitleaks, Semgrep, njsscan, and a suite of custom checks targeting patterns common in AI-generated code. This check is part of the Ops & Reliability category. When a matching pattern is found, Claude triages the finding and produces a plain-English explanation and a concrete fix — no security expertise required.
FREE SCAN
Check your repo for this and 50+ other issues
Connect GitHub → vibecheck scans for secrets, unauthenticated routes, RLS gaps, injection, and more. Claude explains every finding. Free for 2 repos.
scan my repo for free →