aws-codebuild-project-inline-buildspec
Inline buildspec YAML and command strings can contain hard-coded credentials.
Where it sits
| location | BatchGetProjects.projects[].source.buildspec / projects[].secondarySources[].buildspec |
|---|
| location kind | template_document |
|---|
| data kinds | source_code_secret credential password api_key connection_string |
|---|
| emits edge | ContainsCredential |
|---|
| service | CodeBuild (aws:codebuild) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | BatchGetProjects |
|---|
| response path | projects[].source.buildspec / projects[].secondarySources[].buildspec |
|---|
| encoding | yaml |
|---|
| params | {"names": ["\u003cproject-name\u003e"]} |
|---|
Required permissions
codebuild:BatchGetProjects
References