gcp-bigquery-job-query-text-parameters

Saved job configuration retains SQL text and literal query parameters that may contain secrets or PII.

gcpcritical service: gcp:bigquery emits ContainsSecret

Where it sits

locationbigquery.jobs.get.configuration.query.{query,queryParameters[]}
location kindquery_text
data kindscredential customer_data pii sensitive_data
emits edgeContainsSecret
serviceBigQuery (gcp:bigquery)

Collection recipe

access moderead_api
operationbigquery.jobs.get
response pathconfiguration.query.{query,queryParameters[]}
encodingjson
params{"name": "\u003cresource-name\u003e"}

Required permissions

bigquery.jobs.get

References

move · open · esc close