Verified80% confidenceFactExact time
Vercel uses an automated release process in which releases are automatically triggered by github-actions, and commits are verified with GPG signatures.
4
Sources
80%
Confidence
Long-term
Relevance
9/11/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe Vercel AI SDK development team implements an automated release process via GitHub Actions and uses GPG signature verification (key ID: B5690EEEBB952194).79% similarUnverifiedVercel combines GPG signing mechanisms with GitHub Actions' OIDC tokens to achieve auditable build environments and traceable artifacts.77% similarVerifiedv0.40.5 was automatically released by GitHub Actions with a GPG-verified signature.76% similarVerifiedThis release record was completed by a GitHub Actions automated workflow and carries an official GitHub verified signature (Verified).73% similarVerifiedFor CI bot accounts such as github-actions[bot], GitHub signs the automatically generated commits using its own hosted GPG key.70% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/904766API
curl https://kongchang.com/api/v1/knowledge/claims/904766MCP
get_claim(id=904766)