gcp-cloudbuild-inline-build-config
A trigger's inline build template can embed credentials in commands, environment values, and substitutions.
Where it sits
| location | cloudbuild.projects.triggers.get.build.{steps[],substitutions,options.env[]} |
| location kind | template_document |
| data kinds | source_code_secret credential password api_key private_key |
| emits edge | ContainsCredential |
| service | Cloud Build (gcp:cloudbuild) |
Collection recipe
| access mode | read_api |
| operation | cloudbuild.projects.triggers.get |
| response path | build.{steps[],substitutions,options.env[]} |
| encoding | json |
| params | {"name": "\u003cresource-name\u003e"} |
Required permissions
cloudbuild.builds.get
References