⌘K
Lolodurante Native Vercel CI: cross-ref cache misses with identical task hashes We are seeing pure test tasks rerun across Git refs in Native Vercel CI with Turborepo 2.11.10. Reproduction: 1. Complete a successful native CI invocation with cache: true and deterministic inputs. 2. Push another ref and commit containing exactly the same Git tree. 3. Confirm that the actual TURBO_HASH values match the successful invocation. 4. The tasks still log “cache miss, executing” and run the tests again. Same-ref reuse works. Team Remote Cache is enabled. Real declared outputs and explicit team scoping did not resolve this. A focused test using the installed Turbo binary against a local HTTP cache correctly restores across commits and refuses to cache a changed failing test. Is native CI intentionally ref-scoped during the beta? Is there a supported way to reuse successful same-repository PR results after merge while preserving every check, provenance and trust boundaries, without adding credentials or upgrading the plan? If this needs a backend fix, is there a tracking issue or a private channel where Vercel staff can receive the invocation identifiers? We are keeping repository names, commit hashes, invocation IDs, code and private logs out of this public post.
baileylu121 I recently ran into an issue with being overbilled by 20-30 minutes for some simple tasks that only actually took around 10-20 seconds to run - more details here, linking here for visibility: https://community.vercel.com/t/billed-30-minutes-for-sub-20-second-jobs-on-vercel-ci/51752
system There's another community post with 404 debugging tips that might be helpful. Please give these solutions a try and let us know how it goes. https://community.vercel.com/t/debugging-404-errors/437 A human should be around soon to offer more advice. But you can also get helpful information quickly by asking v0.
galb Same request here, from Lookout (lookoutstats.com), a cross-project dashboard for Vercel Web Analytics. We see exactly what you describe: our integration token gets 200 on /v10/projects but 404 "Web Analytics not found." on every /v1/query/web-analytics/visits/* query, and the App permissions editor offers only OpenID scopes. Support also sent us to Community rather than opening a case. We'd like the same two private-beta permissions for our Sign in with Vercel app: Web Analytics: Read Only and Projects: Read Only. Today our users have to paste a personal access token, which is worse for their security than a scoped, revocable grant. Full test details: https://community.vercel.com/t/51138 If Vercel staff can enable this, or tell us who handles beta access, we can share team and App IDs privately. Thanks!
Amy Egan Hey @hal-8981. Are you trying to report a security issue you uncovered? Or are you looking for something more like a security review for your project? I want to make sure I direct you to the right place
Haris Loganathan @amyegan The message was made by my AI agent. It was regarding the vulnerable PHP version, which as I understands, is fixed from vercel, with the node.js version. We just need to make a new deployment and update our security messures.
system Thank you for bringing this to our attention. To ensure this is investigated with the necessary priority and privacy, please report all security-related concerns, potential exploits, or abuse directly to the Vercel Security Team. Please submit your report here: vercel.com/abuse Reporting via this official channel is the fastest way to reach our security engineers and ensures that sensitive information is handled in a secure environment rather than a public forum.
Phamthikimtho1957 4759 I have already submitted a detailed report through vercel.com/abuse over a week ago (Ticket ID: TNS_01c469jXvaN0RuDa), but no action has been taken and the malicious site remains active. Since the official channel has not yielded any response or mitigation, I am reaching out here to ask that your team internally locate and escalate Ticket TNS_01c469jXvaN0RuDa to your Security Engineers immediately.
Phamthikimtho1957 4759 My apologies for tagging you directly, @amyegan! However, since this case has been pending for over a week, I would really appreciate it if you could help pass ticket TNS_01c469jXvaN0RuDa to the security team for urgent review. Thank you so much for your assistance
Amy Egan Hey @paulmain79. Do you have a support case open? The community isn't able to issue refunds. That kind of thing is limited to the support team. If you don't have a case yet, please open one at vercel.com/help so the support team can assist!
Paulmain79 Hi Amy, thank you so much for coming back to me, and sorry for the slow reply. I've now opened a case: #CSE_01iu4vykeYDA9JVJ (Billing > Refund Request, Paul Main's projects, Pro). The case has the full picture: how the Preview build costs grew from May to October as our automated coding agents scaled up, the October Build CPU figure, and the three changes we've made (an ignoreCommand, on-demand Previews and Spend Management). I've had a lot of automated replies while trying to get this looked at, so I'd be really grateful if a member of the Billing team could take a look personally. We're a small non-profit social enterprise supporting teachers, and a goodwill review would make a real difference to us. If you're able to flag the case to a colleague, thank you very much. I'm happy to answer any questions. Kind regards, Paul
