services / Google Cloud / Cloud Build

A Cloud build describes where to find source code, how to build it, and where to store built artifacts.

Code and artifacts are generally stored in other services, such as Cloud storage.

cloudbuild.​builds.​approve

This allows the user to both approve or deny an existing build.

Risks

1. Denial-of-service (HIGH)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links