gcp-artifactregistry-artifact-file-bytes
Downloaded packages, archives, and container layers may contain hard-coded secrets or sensitive source artifacts.
gcpcritical
service: gcp:artifactregistry
emits CanReadData
Where it sits
| location | artifactregistry.projects.locations.repositories.files.download.HTTP response body |
| location kind | code_artifact |
| data kinds | source_code_secret credential private_key customer_data |
| emits edge | CanReadData |
| service | Artifact Registry (gcp:artifactregistry) |
Collection recipe
| access mode | read_api |
| operation | artifactregistry.projects.locations.repositories.files.download |
| response path | HTTP response body |
| encoding | binary |
| params | {"name": "projects/\u003cproject\u003e/locations/\u003clocation\u003e/repositories/\u003crepository\u003e/files/\u003cfile\u003e"} |
Required permissions
artifactregistry.repositories.downloadArtifacts
References