← Back to report

Investigate GCP service account credentials

Build 1.3.2 · Scan 2026-09-30T08:08:43.008Z

1 distinct recorded findings; 1 have inspectable metadata. Locations are representative, not an inventory of every source match.

Google Cloud service-account credentials. These grant server-side access to the developer's GCP project and must never ship in a client — treat as critical and rotate immediately.

Static evidence does not establish runtime impact. Source excerpts and line numbers were not recorded.

Evidence preview

Evidence type

Static string match

Representative location

assets/[value redacted].json

Recorded match

Pattern recorded; identifying value redacted.

Detector rule

gcp_service_account

Recorded file locations

• assets/[value redacted].json