Immich, an open-source Google Photos alternative, had all their *.immich.cloud websites flagged as dangerous by Google Safe Browsing, making them inaccessible to users. The issue stemmed from Google's automated system crawling their preview environments on GitHub and marking them as deceptive, despite being legitimate internal deployments. Each time a new preview environment was created, the entire domain was re-flagged. The team had to repeatedly request reviews through Google Search Console and ultimately decided to move preview environments to a separate domain (immich.build) to minimize impact. The incident highlights how Google Safe Browsing can arbitrarily flag domains without consideration for open-source or self-hosted software workflows.
Table of contents
BackgroundBeing flaggedSearch ConsoleImpact"Fixing" the issueMinimizing the issueA wider issue5 Comments
Sort: