The following describes all security bulletins related to Cloud Build.
To get the latest security bulletins delivered to you, do one of the following:
- Add the URL of this page to your feed reader.
- Add the feed URL directly to your feed reader:
https://cloud.google.com/feeds/cloudbuild-security-bulletins.xml
GCP-2023-013
Published: 2023-06-08
Description
Description | Severity | Notes |
---|---|---|
When you enable the Cloud Build API in a project,
Cloud Build automatically creates a
default service account to
execute builds on your behalf. This Cloud Build service account
previously had the What should I do? No further user action is required. The What vulnerabilities are addressed by this patch? This vulnerability granted builds the permission to list private logs.
Since the |
Low |