gcp-gcr-registry-object-metadata

Custom metadata on Container Registry backing objects is plaintext.

gcphigh service: gcp:gcr emits ContainsSecret

Where it sits

locationstorage.objects.get.metadata.<value>
location kindmetadata
data kindscredential api_key sensitive_data pii
emits edgeContainsSecret
serviceContainer Registry (legacy GCR) (gcp:gcr)

Collection recipe

access moderead_api
operationstorage.objects.get
response pathmetadata.<value>
encodingmap
params{"name": "\u003cresource-name\u003e"}

Required permissions

storage.objects.get

References

move · open · esc close