gcp-gcf-source-archive
A function's source archive can contain hard-coded credentials and sensitive configuration files.
Where it sits
| location | cloudfunctions.projects.locations.functions.get.buildConfig.source.storageSource -> Cloud Storage object bytes |
| location kind | code_artifact |
| data kinds | source_code_secret credential password api_key private_key |
| emits edge | ContainsCredential |
| service | Cloud Functions (gcp:gcf) |
Collection recipe
| access mode | indirect_destination |
| operation | cloudfunctions.projects.locations.functions.get |
| response path | buildConfig.source.storageSource -> Cloud Storage object bytes |
| encoding | binary |
| params | {"name": "\u003cresource-name\u003e"} |
Required permissions
cloudfunctions.functions.get
storage.objects.get
References