gcp-eventarc-trigger-filters-labels

Eventarc trigger filters and labels are plaintext and can disclose internal resource identifiers.

gcpmedium service: gcp:eventarc emits ContainsSecret

Where it sits

locationeventarc.projects.locations.triggers.get.{eventFilters.<value>,labels.<value>}
location kindconfig_field
data kindscredential api_key sensitive_data pii
emits edgeContainsSecret
serviceEventarc (gcp:eventarc)

Collection recipe

access moderead_api
operationeventarc.projects.locations.triggers.get
response path{eventFilters.<value>,labels.<value>}
encodingjson
params{"name": "\u003cresource-name\u003e"}

Required permissions

eventarc.triggers.get

References

move · open · esc close