deployment-token-rotation

What problem does it solve?

Prevents prolonged exposure of compromised or expired deployment secrets by providing a controlled, auditable process to rotate environment tokens across hosted platforms.

Core Features & Use Cases

• Dry-run first, explicit apply: Scripts default to dry-run and require an explicit --apply to execute changes.
• Multi-provider support: Handles Vercel environment variable rotation and Railway service or shared variable updates.
• Verification and rollback guidance: Includes verification steps (health checks, integration calls, log monitoring) and clear rollback instructions using the previous known-good value.
• Use Case: Replace a leaked API token for a payment gateway in production without disrupting service by previewing the change, verifying, then applying.

Quick Start

Ask the agent to run a dry-run rotation for the PAYMENT_GATEWAY_API_TOKEN on Vercel or Railway, confirm the preview, then apply the change when ready.