name: gcloud
binary: gcloud
aliases: []
category:
- cloud
lang:
- all
summary: Google Cloud command-line interface.
homepage: https://github.com/google-cloud-sdk-unofficial/google-cloud-sdk
docs: https://cloud.google.com/sdk/gcloud
detect:
version_args:
- --version
local:
files:
- app.yaml
- cloudbuild.yaml
- cloudbuild.yml
dirs:
- .gcloud
package_json:
package_manager_prefixes: []
use_when:
- Inspect or operate Google Cloud resources
avoid_when:
- Project, account, or credentials are unknown
risk:
level: high
effects:
- network_access
- requires_auth
- remote_read
- remote_write
- cloud_mutation
- secret_exposure
requires_auth: true
destructive: true
confirmation_required_for:
- deleting resources
- deploying services
- changing IAM
guardrails:
- Confirm active project and account before write operations.