cloudbuild.repositories.accessReadToken – 1 risks

The IAM Privilege Catalog

services / Google Cloud / Cloud Build Repository

A Cloud build repository is a connection to a repository located in an external Source Code Management provider, like Github and Gitlab.

cloudbuild.repositories.accessReadToken

Fetches the read token for the connected repository

Risks

Code exfiltration (HIGH)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links

https://cloud.google.com/build/docs/iam-roles-permissions

https://cloud.google.com/build/docs/api/reference/rest/v2/projects.locations.connections.repositories

https://cloud.google.com/build/docs/repositories

Contributed by P0 Security

© 2023–present P0 Security and contributors to the IAM Privilege Catalog