Vercel

Protection patterns for Vercel CLI operations including project removal, environment variables, and domains

The vercel check group covers destructive Vercel CLI operations. Both remove and rm aliases are supported.

Vercel checks

Remove deployment / project


ID	`vercel:remove`
Severity	Critical

Removing a Vercel deployment or project takes it offline permanently.

# Triggers
vercel remove
vercel remove my-project
vercel rm my-project
vercel rm --yes my-project

# Does NOT trigger
vercel list
vercel deploy

Remove project


ID	`vercel:project_remove`
Severity	Critical

Removing a Vercel project deletes it and all its deployments.

# Triggers
vercel project remove my-project
vercel project rm my-project

# Does NOT trigger
vercel project list

Remove environment variable


ID	`vercel:env_remove`
Severity	High

Removing an environment variable can break deployments that depend on it.

# Triggers
vercel env rm MY_VAR
vercel env remove MY_VAR
vercel env rm MY_VAR production

# Does NOT trigger
vercel env ls
vercel env add MY_VAR
vercel env pull

Remove domain


ID	`vercel:domain_remove`
Severity	High

Removing a domain disconnects it from your deployment, causing downtime.

# Triggers
vercel domains rm example.com
vercel domain rm example.com
vercel domains remove example.com
vercel domain remove example.com

# Does NOT trigger
vercel domains ls
vercel domains add example.com

Summary table

ID	Command	Severity
`vercel:remove`	`vercel remove` / `vercel rm`	Critical
`vercel:project_remove`	`vercel project remove` / `vercel project rm`	Critical
`vercel:env_remove`	`vercel env rm` / `vercel env remove`	High
`vercel:domain_remove`	`vercel domains rm` / `vercel domains remove`	High