gcp-cloudbuild-inline-build-config

A trigger's inline build template can embed credentials in commands, environment values, and substitutions.

gcpcritical service: gcp:cloudbuild emits ContainsCredential

Where it sits

locationcloudbuild.projects.triggers.get.build.{steps[],substitutions,options.env[]}
location kindtemplate_document
data kindssource_code_secret credential password api_key private_key
emits edgeContainsCredential
serviceCloud Build (gcp:cloudbuild)

Collection recipe

access moderead_api
operationcloudbuild.projects.triggers.get
response pathbuild.{steps[],substitutions,options.env[]}
encodingjson
params{"name": "\u003cresource-name\u003e"}

Required permissions

cloudbuild.builds.get

References

move · open · esc close