name: gcloud
binary: gcloud
aliases: []
category: cloud
summary: Google Cloud command-line interface.
homepage: https://github.com/google-cloud-sdk-unofficial/google-cloud-sdk
docs: https://cloud.google.com/sdk/gcloud
detect:
version_args: ["--version"]
local:
files: ["app.yaml", "cloudbuild.yaml", "cloudbuild.yml"]
dirs: [".gcloud"]
package_json:
package_manager_prefixes: []
use_when:
- Inspect or operate Google Cloud resources
avoid_when:
- Project, account, or credentials are unknown
risk:
level: high
effects:
- network_access
- requires_auth
- remote_read
- remote_write
- cloud_mutation
- secret_exposure
requires_auth: true
destructive: true
confirmation_required_for:
- deleting resources
- deploying services
- changing IAM
guardrails:
- Confirm active project and account before write operations.