services / Google Cloud / Cloud Build Repository

A Cloud build repository is a connection to a repository located in an external Source Code Management provider, like Github and Gitlab.

cloudbuild.​repositories.​accessReadWriteToken

Fetches the read/write token for the connected repository

Risks

1. Code exfiltration (HIGH)
2. Defacement (HIGH)
3. Denial-of-service (HIGH)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links