gcp-vertexai-workbench-startup-script
Workbench instance startup configuration and scripts can contain hard-coded credentials.
Where it sits
| location | notebooks.projects.locations.instances.get.containerImage.repository/metadata.items or postStartupScript |
| location kind | bootstrap_script |
| data kinds | source_code_secret credential password api_key private_key |
| emits edge | ContainsCredential |
| service | Vertex AI / Workbench (gcp:vertexai) |
Collection recipe
| access mode | read_api |
| operation | notebooks.projects.locations.instances.get |
| response path | containerImage.repository/metadata.items or postStartupScript |
| encoding | string |
| params | {"name": "\u003cresource-name\u003e"} |
Required permissions
notebooks.instances.get
References