gcp-gcr-registry-blob-manifest-bytes
Legacy Container Registry stores manifests and image layers in Cloud Storage, where embedded files can expose secrets.
Where it sits
| location | storage.objects.get.HTTP response body under artifacts.<project>.appspot.com |
|---|
| location kind | code_artifact |
|---|
| data kinds | source_code_secret credential private_key customer_data |
|---|
| emits edge | CanReadData |
|---|
| service | Container Registry (legacy GCR) (gcp:gcr) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | storage.objects.get |
|---|
| response path | HTTP response body under artifacts.<project>.appspot.com |
|---|
| encoding | binary |
|---|
| params | {"alt": "media", "bucket": "artifacts.\u003cproject\u003e.appspot.com", "object": "\u003cmanifest-or-blob\u003e"} |
|---|
Required permissions
References