Vercel
Security & compliance
Code quality
Suspended/disabled integration still installed
Part of the Account supply chain check · fix arrives as a guide
What it is
An integration that is suspended or disabled is still installed on the team.
Why it matters
Suspension stops it functioning but does not revoke its grant. If the vendor is compromised or the integration is re-enabled, the access is still there — and nobody is monitoring a thing they believe is off.
How to fix it
Uninstall it properly so the grant is revoked. A disabled integration you are not using should not retain access it is not exercising.
Run them all on your app
Connect your repo and your live services with read-only scopes. The first scan is free, and nothing changes without your approval.