gcp-vertexai-model-container-environment

Model serving container environment values can persist literal credentials.

gcpcritical service: gcp:vertexai emits ContainsCredential

Where it sits

locationaiplatform.projects.locations.models.get.containerSpec.env[].value
location kindenvironment_variable
data kindscredential password api_key access_key secret_key oauth_token connection_string
emits edgeContainsCredential
serviceVertex AI / Workbench (gcp:vertexai)

Collection recipe

access moderead_api
operationaiplatform.projects.locations.models.get
response pathcontainerSpec.env[].value
encodinglist
params{"name": "\u003cresource-name\u003e"}

Required permissions

aiplatform.models.get

References

move · open · esc close