gcp-vertexai-workbench-startup-script

Workbench instance startup configuration and scripts can contain hard-coded credentials.

gcpcritical service: gcp:vertexai emits ContainsCredential

Where it sits

locationnotebooks.projects.locations.instances.get.containerImage.repository/metadata.items or postStartupScript
location kindbootstrap_script
data kindssource_code_secret credential password api_key private_key
emits edgeContainsCredential
serviceVertex AI / Workbench (gcp:vertexai)

Collection recipe

access moderead_api
operationnotebooks.projects.locations.instances.get
response pathcontainerImage.repository/metadata.items or postStartupScript
encodingstring
params{"name": "\u003cresource-name\u003e"}

Required permissions

notebooks.instances.get

References

move · open · esc close