{
"canonical_url": "trigger.dev/changelog",
"capabilities": [],
"category": "Open-source project",
"classification": {
"matched": {
"business": [
"automation",
"workflow"
],
"technology": [
"deploy",
"framework",
"mcp",
"orchestration"
]
},
"taxonomy_version": "sar-taxonomy-1.0"
},
"commercial": false,
"compliance": [
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 5
},
"display": "DPA available: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://trigger.dev/",
"framework": "gdpr",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "787f8741ee70ca7dce7f52d1435bb9ca07aa7cd21ca1f40fc66d3d8aad21ad88",
"period_end": null,
"retrieved_at": "2026-10-26T12:31:04Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "DPA_AVAILABLE"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 5
},
"display": "HIPAA: BAA available (vendor-claimed, 2026-10-26)",
"evidence_url": "https://trigger.dev/",
"framework": "hipaa",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "787f8741ee70ca7dce7f52d1435bb9ca07aa7cd21ca1f40fc66d3d8aad21ad88",
"period_end": null,
"retrieved_at": "2026-10-26T12:31:04Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 5
},
"display": "HIPAA: BAA available (vendor-claimed, 2026-10-26)",
"evidence_url": "https://trigger.dev/security",
"framework": "hipaa",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "226dde93fd8299f301d055bdcbaa1be89c069f4d20c122f9a1e5eed696b96b98",
"period_end": null,
"retrieved_at": "2026-10-26T12:31:04Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "BAA_AVAILABLE"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 5
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://trigger.dev/",
"framework": "soc2",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "787f8741ee70ca7dce7f52d1435bb9ca07aa7cd21ca1f40fc66d3d8aad21ad88",
"period_end": null,
"retrieved_at": "2026-10-26T12:31:04Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 5
},
"display": "SOC 2 Type II: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://trigger.dev/security",
"framework": "soc2",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "226dde93fd8299f301d055bdcbaa1be89c069f4d20c122f9a1e5eed696b96b98",
"period_end": null,
"retrieved_at": "2026-10-26T12:31:04Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "SOC2_TYPE_II"
}
],
"deployment": "self-hosted",
"description": "Trigger.dev – build and deploy durable AI agents and workflows",
"disclaimer": "Reference implementation by Hemant Naik. Compliance information is compiled from the sources shown as of the date shown. It is not an assessment, certification, legal opinion or recommendation. Confirm current status with the vendor and the issuing body.",
"domains": {
"business": {
"components": {
"adoption": 24.46,
"docs": 7.0,
"domain_fit": 56.4,
"ecosystem": 6.6,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 0.564,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "general",
"rank": null,
"score": 69.5,
"score_version": "sar-score-2.0",
"source": "classifier",
"unknown": []
},
"technology": {
"components": {
"adoption": 24.46,
"docs": 7.0,
"domain_fit": 81.0,
"ecosystem": 6.6,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 0.81,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "technology",
"rank": null,
"score": 76.3,
"score_version": "sar-score-2.0",
"source": "classifier",
"unknown": []
}
},
"external_ids": {
"github": "triggerdotdev/trigger.dev"
},
"first_seen": "2026-10-26T12:12:50Z",
"governance": {
"certification_disclaimer": true,
"claims": [],
"evidence_urls": []
},
"id": "res_a33966d8329268ec",
"identity": {
"evidence": [
"repository_ownership"
],
"rules_version": "identity-1.1",
"tier": 3
},
"issues": {
"advisories": 0,
"cves": 38,
"incidents": 0,
"links": [
{
"date": "2026-08-13",
"kind": "cve",
"title": "CVE-2026-73654",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73654"
},
{
"date": "2026-08-13",
"kind": "cve",
"title": "CVE-2026-73655",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73655"
},
{
"date": "2026-08-13",
"kind": "cve",
"title": "CVE-2026-73656",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73656"
},
{
"date": "2026-08-13",
"kind": "cve",
"title": "CVE-2026-73657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73657"
},
{
"date": "2026-08-13",
"kind": "cve",
"title": "CVE-2026-73658",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73658"
},
{
"date": "2026-08-13",
"kind": "cve",
"title": "CVE-2026-73659",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73659"
},
{
"date": "2026-09-04",
"kind": "cve",
"title": "CVE-2026-85650",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85650"
},
{
"date": "2026-09-04",
"kind": "cve",
"title": "CVE-2026-85651",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85651"
},
{
"date": "2026-09-16",
"kind": "cve",
"title": "CVE-2026-92773",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92773"
},
{
"date": "2026-10-21",
"kind": "cve",
"title": "CVE-2026-114065",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114065"
}
],
"regulator_actions": 0,
"withdrawn_certificates": 0
},
"last_seen": "2026-10-26T12:17:57Z",
"license": "Apache-2.0",
"merged_ids": [
"res_a33966d8329268ec"
],
"name": "trigger.dev",
"news": [
{
"cluster_size": 1,
"date": "2026-10-23T14:50:57Z",
"headline": "trigger.dev: Helm Chart 4.8.1",
"kind": "vendor",
"link_confidence": 1.0,
"outlet": "GitHub releases",
"summary": "### Installation\n```bash\nhelm upgrade --install trigger \\\n  oci://ghcr.io/triggerdotdev/charts/trigger \\\n  --version \"4.8.1\"\n```\n\n### Changes\nSee commit history for detailed changes in this release.",
"tag": "product_update",
"url": "https://github.com/triggerdotdev/trigger.dev/releases/tag/helm-v4.8.1"
},
{
"cluster_size": 1,
"date": "2026-10-23T14:28:11Z",
"headline": "trigger.dev v4.8.1",
"kind": "vendor",
"link_confidence": 1.0,
"outlet": "GitHub releases",
"summary": "# trigger.dev v4.8.1\n\n## Upgrade\n\n```sh\nnpx trigger.dev@latest update  # npm\npnpm dlx trigger.dev@latest update  # pnpm\nyarn dlx trigger.dev@latest update  # yarn\nbunx trigger.dev@latest update  # bun\n```\n\nSelf-hosted Docker image: [`ghcr.i",
"tag": "product_update",
"url": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.8.1"
}
],
"news_checked": true,
"protocols": {
"a2a": {
"checked_at": "2026-10-26T12:24:07Z",
"parser_version": "a2a-0.3+1.0",
"status": "not_found"
},
"ard": {
"checked_at": "2026-10-26T12:24:05Z",
"parser_version": "ard-0.91",
"status": "not_found"
},
"mcp": {
"evidence_url": "https://trigger.dev/changelog",
"note": "named in the resource's own tags",
"probe": {
"checked_at": "2026-10-26T12:24:07Z",
"status": "not_found"
},
"source": "self_description",
"status": "claimed"
}
},
"publisher_domain": "trigger.dev",
"resource_type": "mcp_server",
"scope": "public",
"security": {
"advisories": 0,
"checked_at": "2026-10-26T12:41:56Z",
"cves": 38,
"source": "nvd",
"tier": 1
},
"signals": {
"github_archived": false,
"github_created_at": "2022-11-30T14:59:07Z",
"github_forks": 1517,
"github_language": "TypeScript",
"github_open_issues": 249,
"github_pushed_at": "2026-10-26T12:02:02Z",
"github_stars": 16618,
"github_topic": "ai-agents",
"homepage": "https://trigger.dev/changelog"
},
"slug": "triggerdotdev-trigger-dev",
"sources": [
{
"payload_hash": "6df92b3df68576bb69e1682e253b5ca28bcf7bdf991c244a0ed3e8db137ec0ed",
"retrieved_at": "2026-10-26T12:12:50Z",
"system": "github",
"url": "https://github.com/triggerdotdev/trigger.dev"
}
],
"tags": [
"ai",
"ai-agent-framework",
"ai-agents",
"automation",
"background-jobs",
"mcp",
"mcp-server",
"nextjs",
"orchestration",
"scheduler",
"serverless",
"workflow-automation",
"workflows"
],
"tenant": null,
"traces": [],
"trust": {
"compliance": 5,
"identity": 3,
"issues": 3,
"protocols": 3,
"security": 1,
"traces": 5,
"vendor_compliance": 4
},
"url": "https://trigger.dev/changelog",
"vendor": "triggerdotdev"
}