gcp-batch-private-registry-password
A private-registry password supplied as plaintext is retained in the Batch job and exposed to users who can view the job or its logs.
Where it sits
| location | batch.projects.locations.jobs.get.taskGroups[].taskSpec.runnables[].container.password |
|---|
| location kind | secret_value |
|---|
| data kinds | password credential |
|---|
| emits edge | CanReadCredential |
|---|
| service | Batch (gcp:batch) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | batch.projects.locations.jobs.get |
|---|
| response path | taskGroups[].taskSpec.runnables[].container.password |
|---|
| encoding | string |
|---|
| params | {"name": "\u003cresource-name\u003e"} |
|---|
Required permissions
References