gcp-cloudrun-service-label-annotation-values

Cloud Run labels and annotations are plaintext and may be broadly visible.

gcpmedium service: gcp:cloudrun emits ContainsSecret

Where it sits

locationrun.projects.locations.services.get.{labels.<value>,annotations.<value>}
location kindtag
data kindscredential api_key sensitive_data pii
emits edgeContainsSecret
serviceCloud Run (gcp:cloudrun)

Collection recipe

access moderead_api
operationrun.projects.locations.services.get
response path{labels.<value>,annotations.<value>}
encodingmap
params{"name": "\u003cresource-name\u003e"}

Required permissions

run.services.get

References

move · open · esc close