Exposure DB

cloudscheduler.projects.locations.jobs.get.pubsubTarget.{data,attributes.<value>} - leaks credential, api_key, oauth_token, customer_data, sensitive_data

sql.users.insert/sql.users.update.request.password - leaks password, database_credential

sql.instances.demoteMaster.request.demoteMasterContext.replicaConfiguration.mysqlReplicaConfiguration.{password,clientKey} - leaks password, private_key, database_credential, credential

sql.connect.generateEphemeralCert/sql.sslCerts.createEphemeral.request.access_token - leaks oauth_token, bearer_token, credential

sql.instances.insert/sql.instances.patch.request.{onPremisesConfiguration,replicaConfiguration.mysqlReplicaConfiguration}.{password,clientKey} - leaks password, private_key, database_credential, credential

sql.instances.insert.request.rootPassword - leaks password, database_credential, credential

composer.projects.locations.environments.get.config.softwareConfig.airflowConfigOverrides.<value> - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string

composer.projects.locations.environments.get.config.softwareConfig.envVariables.<value> - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string

dataflow.projects.locations.jobs.get.environment.{sdkPipelineOptions,workerPools[].metadata.<value>,userAgent,version} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data

dataflow.projects.locations.jobs.get.steps[].properties - leaks source_code_secret, credential, password, api_key, private_key, connection_string

dataproc.projects.regions.clusters.get.config.{gceClusterConfig.metadata.<value>,softwareConfig.properties.<value>} - leaks credential, password, api_key, access_key, secret_key, oauth_token, source_code_secret, connection_string

dataproc.projects.regions.clusters.get.config.initializationActions[].executableFile -> Cloud Storage object bytes - leaks source_code_secret, credential, password, api_key, private_key

dataproc.projects.regions.jobs.get.{hadoopJob,sparkJob,pysparkJob,sparkSqlJob,prestoJob,trinoJob}.args[]/properties.<value> - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data

dataproc.projects.regions.workflowTemplates.get.jobs[].{hadoopJob,sparkJob,pysparkJob,sparkSqlJob,prestoJob,trinoJob} - leaks source_code_secret, credential, password, api_key, private_key, connection_string

datastream.projects.locations.connectionProfiles.create/datastream.projects.locations.connectionProfiles.patch.request.{mysqlProfile.password,postgresqlProfile.password,oracleProfile.password,oracleProfile.oracleAsmConfig.password,sqlServerProfile.password,mongodbProfile.password} - leaks password, database_credential, credential

datastream.projects.locations.connectionProfiles.create/datastream.projects.locations.connectionProfiles.patch.request.{mysqlProfile.sslConfig.clientKey,postgresqlProfile.sslConfig.serverAndClientVerification.clientKey,mongodbProfile.sslConfig.clientKey} - leaks private_key, database_credential, credential

datastream.projects.locations.connectionProfiles.get.{mysqlProfile,postgresqlProfile,oracleProfile,sqlServerProfile,mongodbProfile}.{hostname,username,database} - leaks database_credential, pii, sensitive_data

Cloud Data Fusion REST API.pipeline configuration JSON: properties and plugin configuration - leaks source_code_secret, credential, password, api_key, private_key, connection_string

datastream.projects.locations.connectionProfiles.create/datastream.projects.locations.connectionProfiles.patch.request.forwardSshConnectivity.{password,privateKey} - leaks password, private_key, credential

datastream.projects.locations.connectionProfiles.create/datastream.projects.locations.connectionProfiles.patch.request.{salesforceProfile.oauth2ClientCredentials.clientSecret,salesforceMarketingCloudProfile.oauthClientCredentials.clientSecret.rawValue,serviceNowProfile.oauthClientCredentials.clientSecret.rawValue,dataverseProfile.oauthClientCredentials.clientSecret.rawValue,workdayProfile.oauthRefreshTokenCredentials.oauthClientCredentials.clientSecret.rawValue} - leaks oauth_token, secret_key, credential

datastream.projects.locations.connectionProfiles.create/datastream.projects.locations.connectionProfiles.patch.request.salesforceProfile.userCredentials.{password,securityToken} - leaks password, oauth_token, credential

datastream.projects.locations.connectionProfiles.create/datastream.projects.locations.connectionProfiles.patch.request.serviceNowProfile.userPasswordCredentials.password - leaks password, credential

datastream.projects.locations.connectionProfiles.create/datastream.projects.locations.connectionProfiles.patch.request.workdayProfile.oauthRefreshTokenCredentials.refreshToken.rawValue - leaks oauth_token, bearer_token, credential

deploymentmanager.manifests.get.{config.content,expandedConfig,layout} - leaks source_code_secret, credential, password, api_key, private_key, connection_string

deploymentmanager.manifests.get.imports[].content - leaks source_code_secret, credential, password, api_key, private_key

eventarc.projects.locations.channelConnections.create.request.activationToken - leaks credential, bearer_token

compute.instances.get.metadata.items[].value - leaks credential, password, api_key, access_key, secret_key, oauth_token, source_code_secret

compute.instanceTemplates.get.properties.metadata.items[].value - leaks credential, password, api_key, access_key, secret_key, oauth_token, source_code_secret

compute.projects.get.commonInstanceMetadata.items[].value - leaks credential, password, api_key, access_key, secret_key, oauth_token, source_code_secret

cloudfunctions.projects.locations.functions.get.buildConfig.environmentVariables.<value> - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string

cloudfunctions.projects.locations.functions.get.serviceConfig.environmentVariables.<value> - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string

cloudfunctions.projects.locations.functions.get.buildConfig.source.storageSource -> Cloud Storage object bytes - leaks source_code_secret, credential, password, api_key, private_key

storage.objects.watchAll.request.token - leaks webhook_secret, credential

Kubernetes CoreV1 readNamespacedConfigMap/listConfigMapForAllNamespaces.ConfigMap.{data,binaryData}.<value> - leaks credential, password, api_key, access_key, secret_key, oauth_token, source_code_secret

Kubernetes workload GET/LIST.PodSpec.containers[].{command[],args[]} - leaks credential, password, api_key, access_key, secret_key, oauth_token, sensitive_data

Kubernetes workload GET/LIST.PodSpec.containers[].env[].value - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string

iap.updateIapSettings.request.accessSettings.{oauthSettings.clientSecret,workforceIdentitySettings.oauth2.clientSecret} - leaks oauth_token, secret_key, credential

compute.backendServices.get.{customRequestHeaders[],customResponseHeaders[]} - leaks credential, api_key, oauth_token, sensitive_data

compute.backendServices.insert/compute.backendServices.patch/compute.backendServices.update.request.iap.oauth2ClientSecret - leaks oauth_token, secret_key, credential

compute.sslCertificates.insert/compute.regionSslCertificates.insert.request.{privateKey,selfManaged.privateKey} - leaks private_key, credential

compute.urlMaps.get.headerAction.{requestHeadersToAdd[],responseHeadersToAdd[]}.headerValue - leaks credential, api_key, oauth_token, sensitive_data

monitoring.projects.uptimeCheckConfigs.get.httpCheck.{headers.<value>,path} - leaks credential, api_key, sensitive_data

pubsub.projects.subscriptions.pull.receivedMessages[].message.attributes.<value> - leaks credential, api_key, sensitive_data, pii

pubsub.projects.subscriptions.get.pushConfig.{pushEndpoint,attributes.<value>} - leaks credential, api_key, webhook_secret, sensitive_data

secretmanager.projects.secrets.enableManagedRotation/secretmanager.projects.locations.secrets.enableManagedRotation.request.cloudSqlSingleUserCredentials.password - leaks password, database_credential, credential

cloudtasks.projects.locations.queues.tasks.get.httpRequest.{url,headers.<value>} - leaks credential, api_key, oauth_token, sensitive_data

aiplatform.projects.locations.cachedContents.create.request.{contents[],systemInstruction} - leaks credential, password, api_key, oauth_token, customer_data, pii, sensitive_data

aiplatform.projects.locations.cachedContents.create.request.tools[].{exaAiSearch.apiKey,parallelAiSearch.apiKey,retrieval.externalApi.apiAuth.apiKeyConfig.apiKeyString,retrieval.externalApi.authConfig.apiKeyConfig.apiKeyString,retrieval.externalApi.authConfig.oauthConfig.accessToken,retrieval.externalApi.authConfig.oidcConfig.idToken} - leaks api_key, oauth_token, bearer_token, credential

aiplatform.projects.locations.customJobs.get.jobSpec.workerPoolSpecs[].containerSpec.{command[],args[]} - leaks credential, password, api_key, access_key, secret_key, oauth_token, sensitive_data

aiplatform.projects.locations.customJobs.get.jobSpec.workerPoolSpecs[].containerSpec.env[].value - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string