Skip to main content

Gcp/securitycenter

@swamp/gcp/securitycenterv2026.07.21.3· 5d agoMODELS
01README

Google Cloud securitycenter infrastructure models

02Release Notes
  • Updated: assets, bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, sources, sources_findings, attackpaths, resourcevalueconfigs, simulations, simulations_attackexposureresults_attackpaths, simulations_attackexposureresults_valuedresources, simulations_attackpaths, simulations_valuedresources, simulations_valuedresources_attackpaths, valuedresources
03Models19
assets.tsv2026.07.21.3

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn get(identifier: string)
Get a assets
ArgumentTypeDescription
identifierstringThe name of the assets
fn sync(identifier?: string)
Sync assets state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific assets by name (e.g. one discovered by list)
fn list(compareDuration?: string, fieldMask?: string, filter?: string, orderBy?: string, pageSize?: number, readTime?: string, maxPages?: number)
List assets resources
ArgumentTypeDescription
compareDuration?string
fieldMask?string
filter?string
orderBy?string
pageSize?number
readTime?string
maxPages?numberMaximum number of pages to fetch (default: 10)
fn group(compareDuration?: any, filter?: any, groupBy?: any, pageSize?: any, pageToken?: any, readTime?: any)
group
ArgumentTypeDescription
compareDuration?any
filter?any
groupBy?any
pageSize?any
pageToken?any
readTime?any
fn update_security_marks(canonicalName?: any, marks?: any, name?: any)
update security marks
ArgumentTypeDescription
canonicalName?any
marks?any
name?any
attackpaths.tsv2026.07.21.3

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn get(identifier: string)
Get a attackPaths
ArgumentTypeDescription
identifierstringThe name of the attackPaths
fn sync(identifier?: string)
Sync attackPaths state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific attackPaths by name (e.g. one discovered by list)
fn list(filter?: string, pageSize?: number, maxPages?: number)
List attackPaths resources
ArgumentTypeDescription
filter?string
pageSize?number
maxPages?numberMaximum number of pages to fetch (default: 10)
bigqueryexports.tsv2026.07.21.3

Global Arguments

ArgumentTypeDescription
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
createTime?string
dataset?string
description?string
filter?string
mostRecentEditor?string
name?string
principal?string
updateTime?string
bigQueryExportId?stringThe bigQueryExportId for this resource
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn create()
Create a bigQueryExports
fn get(identifier: string)
Get a bigQueryExports
ArgumentTypeDescription
identifierstringThe name of the bigQueryExports
fn update(identifier?: string)
Update bigQueryExports attributes
ArgumentTypeDescription
identifier?stringTarget a specific bigQueryExports by name (e.g. one discovered by list)
fn delete(identifier: string)
Delete the bigQueryExports
ArgumentTypeDescription
identifierstringThe name of the bigQueryExports
fn sync(identifier?: string)
Sync bigQueryExports state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific bigQueryExports by name (e.g. one discovered by list)
fn list(pageSize?: number, maxPages?: number)
List bigQueryExports resources
ArgumentTypeDescription
pageSize?number
maxPages?numberMaximum number of pages to fetch (default: 10)
eventthreatdetectionsettings_custommodules.tsv2026.07.21.3

Global Arguments

ArgumentTypeDescription
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
ancestorModule?string
cloudProvider?enum
config?record
description?string
displayName?string
enablementState?enum
lastEditor?string
name?string
type?string
updateTime?string
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn create()
Create a customModules
fn get(identifier: string)
Get a customModules
ArgumentTypeDescription
identifierstringThe name of the customModules
fn update(identifier?: string)
Update customModules attributes
ArgumentTypeDescription
identifier?stringTarget a specific customModules by name (e.g. one discovered by list)
fn delete(identifier: string)
Delete the customModules
ArgumentTypeDescription
identifierstringThe name of the customModules
fn sync(identifier?: string)
Sync customModules state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific customModules by name (e.g. one discovered by list)
fn list(pageSize?: number, maxPages?: number)
List customModules resources
ArgumentTypeDescription
pageSize?number
maxPages?numberMaximum number of pages to fetch (default: 10)
fn list_descendant()
list descendant
eventthreatdetectionsettings_effectivecustommodules.tsv2026.07.21.3

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn get(identifier: string)
Get a effectiveCustomModules
ArgumentTypeDescription
identifierstringThe name of the effectiveCustomModules
fn sync(identifier?: string)
Sync effectiveCustomModules state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific effectiveCustomModules by name (e.g. one discovered by list)
fn list(pageSize?: number, maxPages?: number)
List effectiveCustomModules resources
ArgumentTypeDescription
pageSize?number
maxPages?numberMaximum number of pages to fetch (default: 10)
muteconfigs.tsv2026.07.21.3

Global Arguments

ArgumentTypeDescription
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
createTime?string
description?string
expiryTime?string
filter?string
mostRecentEditor?string
name?string
type?enum
updateTime?string
fn get(identifier: string)
Get a muteConfigs
ArgumentTypeDescription
identifierstringThe name of the muteConfigs
fn update(identifier?: string)
Update muteConfigs attributes
ArgumentTypeDescription
identifier?stringTarget a specific muteConfigs by name (e.g. one discovered by list)
fn delete(identifier: string)
Delete the muteConfigs
ArgumentTypeDescription
identifierstringThe name of the muteConfigs
fn sync(identifier?: string)
Sync muteConfigs state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific muteConfigs by name (e.g. one discovered by list)
notificationconfigs.tsv2026.07.21.3

Global Arguments

ArgumentTypeDescription
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
description?string
name?string
pubsubTopic?string
serviceAccount?string
streamingConfig?object
configId?stringThe configId for this resource
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn create()
Create a notificationConfigs
fn get(identifier: string)
Get a notificationConfigs
ArgumentTypeDescription
identifierstringThe name of the notificationConfigs
fn update(identifier?: string)
Update notificationConfigs attributes
ArgumentTypeDescription
identifier?stringTarget a specific notificationConfigs by name (e.g. one discovered by list)
fn delete(identifier: string)
Delete the notificationConfigs
ArgumentTypeDescription
identifierstringThe name of the notificationConfigs
fn sync(identifier?: string)
Sync notificationConfigs state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific notificationConfigs by name (e.g. one discovered by list)
fn list(pageSize?: number, maxPages?: number)
List notificationConfigs resources
ArgumentTypeDescription
pageSize?number
maxPages?numberMaximum number of pages to fetch (default: 10)
resourcevalueconfigs.tsv2026.07.21.3

Global Arguments

ArgumentTypeDescription
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
cloudProvider?enum
createTime?string
description?string
name?string
resourceLabelsSelector?record
resourceType?string
resourceValue?enum
scope?string
sensitiveDataProtectionMapping?object
tagValues?array
updateTime?string
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn get(identifier: string)
Get a resourceValueConfigs
ArgumentTypeDescription
identifierstringThe name of the resourceValueConfigs
fn update(identifier?: string)
Update resourceValueConfigs attributes
ArgumentTypeDescription
identifier?stringTarget a specific resourceValueConfigs by name (e.g. one discovered by list)
fn delete(identifier: string)
Delete the resourceValueConfigs
ArgumentTypeDescription
identifierstringThe name of the resourceValueConfigs
fn sync(identifier?: string)
Sync resourceValueConfigs state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific resourceValueConfigs by name (e.g. one discovered by list)
fn list(pageSize?: number, maxPages?: number)
List resourceValueConfigs resources
ArgumentTypeDescription
pageSize?number
maxPages?numberMaximum number of pages to fetch (default: 10)
fn batch_create(requests?: any)
batch create
ArgumentTypeDescription
requests?any
securityhealthanalyticssettings_custommodules.tsv2026.07.21.3

Global Arguments

ArgumentTypeDescription
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
ancestorModule?string
cloudProvider?enum
customConfig?object
displayName?string
enablementState?enum
lastEditor?string
name?string
updateTime?string
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn create()
Create a customModules
fn get(identifier: string)
Get a customModules
ArgumentTypeDescription
identifierstringThe name of the customModules
fn update(identifier?: string)
Update customModules attributes
ArgumentTypeDescription
identifier?stringTarget a specific customModules by name (e.g. one discovered by list)
fn delete(identifier: string)
Delete the customModules
ArgumentTypeDescription
identifierstringThe name of the customModules
fn sync(identifier?: string)
Sync customModules state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific customModules by name (e.g. one discovered by list)
fn list(pageSize?: number, maxPages?: number)
List customModules resources
ArgumentTypeDescription
pageSize?number
maxPages?numberMaximum number of pages to fetch (default: 10)
fn list_descendant()
list descendant
fn simulate(customConfig?: any, resource?: any)
simulate
ArgumentTypeDescription
customConfig?any
resource?any
securityhealthanalyticssettings_effectivecustommodules.tsv2026.07.21.3

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn get(identifier: string)
Get a effectiveCustomModules
ArgumentTypeDescription
identifierstringThe name of the effectiveCustomModules
fn sync(identifier?: string)
Sync effectiveCustomModules state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific effectiveCustomModules by name (e.g. one discovered by list)
fn list(pageSize?: number, maxPages?: number)
List effectiveCustomModules resources
ArgumentTypeDescription
pageSize?number
maxPages?numberMaximum number of pages to fetch (default: 10)
simulations.tsv2026.07.21.3

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
fn get(identifier: string)
Get a simulations
ArgumentTypeDescription
identifierstringThe name of the simulations
fn sync(identifier?: string)
Sync simulations state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific simulations by name (e.g. one discovered by list)
simulations_attackexposureresults_attackpaths.tsv2026.07.21.3

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn get(identifier: string)
Get a attackPaths
ArgumentTypeDescription
identifierstringThe name of the attackPaths
fn sync(identifier?: string)
Sync attackPaths state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific attackPaths by name (e.g. one discovered by list)
fn list(filter?: string, pageSize?: number, maxPages?: number)
List attackPaths resources
ArgumentTypeDescription
filter?string
pageSize?number
maxPages?numberMaximum number of pages to fetch (default: 10)
simulations_attackexposureresults_valuedresources.tsv2026.07.21.3

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn get(identifier: string)
Get a valuedResources
ArgumentTypeDescription
identifierstringThe name of the valuedResources
fn sync(identifier?: string)
Sync valuedResources state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific valuedResources by name (e.g. one discovered by list)
fn list(filter?: string, orderBy?: string, pageSize?: number, maxPages?: number)
List valuedResources resources
ArgumentTypeDescription
filter?string
orderBy?string
pageSize?number
maxPages?numberMaximum number of pages to fetch (default: 10)
simulations_attackpaths.tsv2026.07.21.3

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn get(identifier: string)
Get a attackPaths
ArgumentTypeDescription
identifierstringThe name of the attackPaths
fn sync(identifier?: string)
Sync attackPaths state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific attackPaths by name (e.g. one discovered by list)
fn list(filter?: string, pageSize?: number, maxPages?: number)
List attackPaths resources
ArgumentTypeDescription
filter?string
pageSize?number
maxPages?numberMaximum number of pages to fetch (default: 10)
simulations_valuedresources.tsv2026.07.21.3

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn get(identifier: string)
Get a valuedResources
ArgumentTypeDescription
identifierstringThe name of the valuedResources
fn sync(identifier?: string)
Sync valuedResources state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific valuedResources by name (e.g. one discovered by list)
fn list(filter?: string, orderBy?: string, pageSize?: number, maxPages?: number)
List valuedResources resources
ArgumentTypeDescription
filter?string
orderBy?string
pageSize?number
maxPages?numberMaximum number of pages to fetch (default: 10)
simulations_valuedresources_attackpaths.tsv2026.07.21.3

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn get(identifier: string)
Get a attackPaths
ArgumentTypeDescription
identifierstringThe name of the attackPaths
fn sync(identifier?: string)
Sync attackPaths state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific attackPaths by name (e.g. one discovered by list)
fn list(filter?: string, pageSize?: number, maxPages?: number)
List attackPaths resources
ArgumentTypeDescription
filter?string
pageSize?number
maxPages?numberMaximum number of pages to fetch (default: 10)
sources.tsv2026.07.21.3

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn get(identifier: string)
Get a sources
ArgumentTypeDescription
identifierstringThe name of the sources
fn sync(identifier?: string)
Sync sources state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific sources by name (e.g. one discovered by list)
fn list(pageSize?: number, maxPages?: number)
List sources resources
ArgumentTypeDescription
pageSize?number
maxPages?numberMaximum number of pages to fetch (default: 10)
sources_findings.tsv2026.07.21.3

Global Arguments

ArgumentTypeDescription
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
access?object
affectedResources?object
agent?object
agentAnomaly?object
agentDataAccessEvents?array
agentSessions?array
aiModel?object
application?object
artifactGuardPolicies?object
attackExposure?object
backupDisasterRecovery?object
canonicalName?string
category?string
chokepoint?object
cloudArmor?object
cloudDlpDataProfile?object
cloudDlpInspection?object
complianceDetails?object
compliances?array
connections?array
contacts?record
containers?array
createTime?string
dataAccessEvents?array
dataFlowEvents?array
dataRetentionDeletionEvents?array
database?object
description?string
discoveredWorkload?object
disk?object
eventTime?string
exfiltration?object
externalExposure?object
externalSystems?record
externalUri?string
files?array
findingClass?enum
groupMemberships?array
iamBindings?array
iamDetails?object
indicator?object
ipRules?object
job?object
kernelRootkit?object
kubernetes?object
loadBalancers?array
logEntries?array
mitreAttack?object
moduleName?string
mute?enum
muteInfo?object
muteInitiator?string
muteUpdateTime?string
name?string
networks?array
nextSteps?string
notebook?object
orgPolicies?array
parent?string
parentDisplayName?string
policyViolationSummary?object
processes?array
resourceName?string
secret?object
securityMarks?object
securityPosture?object
severity?enum
sourceProperties?record
state?enum
toxicCombination?object
vertexAi?object
vulnerability?object
fn get(identifier: string)
Get a findings
ArgumentTypeDescription
identifierstringThe name of the findings
fn update(identifier?: string)
Update findings attributes
ArgumentTypeDescription
identifier?stringTarget a specific findings by name (e.g. one discovered by list)
fn sync(identifier?: string)
Sync findings state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific findings by name (e.g. one discovered by list)
fn list(fieldMask?: string, filter?: string, orderBy?: string, pageSize?: number, maxPages?: number)
List findings resources
ArgumentTypeDescription
fieldMask?string
filter?string
orderBy?string
pageSize?number
maxPages?numberMaximum number of pages to fetch (default: 10)
fn group(compareDuration?: any, filter?: any, groupBy?: any, pageSize?: any, pageToken?: any, readTime?: any)
group
ArgumentTypeDescription
compareDuration?any
filter?any
groupBy?any
pageSize?any
pageToken?any
readTime?any
fn set_mute(mute?: any)
set mute
ArgumentTypeDescription
mute?any
fn set_state(startTime?: any, state?: any)
set state
ArgumentTypeDescription
startTime?any
state?any
fn update_security_marks(canonicalName?: any, marks?: any, name?: any)
update security marks
ArgumentTypeDescription
canonicalName?any
marks?any
name?any
valuedresources.tsv2026.07.21.3

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn get(identifier: string)
Get a valuedResources
ArgumentTypeDescription
identifierstringThe name of the valuedResources
fn sync(identifier?: string)
Sync valuedResources state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific valuedResources by name (e.g. one discovered by list)
fn list(filter?: string, orderBy?: string, pageSize?: number, maxPages?: number)
List valuedResources resources
ArgumentTypeDescription
filter?string
orderBy?string
pageSize?number
maxPages?numberMaximum number of pages to fetch (default: 10)
04Previous Versions19
2026.07.20.2
  • Updated: assets, bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, sources, sources_findings, attackpaths, resourcevalueconfigs, simulations, simulations_attackexposureresults_attackpaths, simulations_attackexposureresults_valuedresources, simulations_attackpaths, simulations_valuedresources, simulations_valuedresources_attackpaths, valuedresources
2026.07.20.1
  • Updated: assets, bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, sources, sources_findings, attackpaths, resourcevalueconfigs, simulations, simulations_attackexposureresults_attackpaths, simulations_attackexposureresults_valuedresources, simulations_attackpaths, simulations_valuedresources, simulations_valuedresources_attackpaths, valuedresources
2026.07.19.1
  • Updated: assets, bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, sources, sources_findings, attackpaths, resourcevalueconfigs, simulations, simulations_attackexposureresults_attackpaths, simulations_attackexposureresults_valuedresources, simulations_attackpaths, simulations_valuedresources, simulations_valuedresources_attackpaths, valuedresources
2026.07.18.2
  • Updated: assets, bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, sources, sources_findings, attackpaths, resourcevalueconfigs, simulations, simulations_attackexposureresults_attackpaths, simulations_attackexposureresults_valuedresources, simulations_attackpaths, simulations_valuedresources, simulations_valuedresources_attackpaths, valuedresources
2026.07.17.2
  • Updated: bigqueryexports, eventthreatdetectionsettings_custommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, sources_findings, resourcevalueconfigs
2026.07.17.1
  • Updated: bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, resourcevalueconfigs, simulations_valuedresources
2026.07.15.1
  • Updated: sources_findings
2026.06.27.1
  • Updated: sources_findings
2026.06.24.1
  • Updated: sources_findings
2026.06.08.2
  • Updated: assets, bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, sources, sources_findings, attackpaths, resourcevalueconfigs, simulations, simulations_attackexposureresults_attackpaths, simulations_attackexposureresults_valuedresources, simulations_attackpaths, simulations_valuedresources, simulations_valuedresources_attackpaths, valuedresources
2026.06.07.1
  • Updated: assets, bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, sources, sources_findings, attackpaths, resourcevalueconfigs, simulations, simulations_attackexposureresults_attackpaths, simulations_attackexposureresults_valuedresources, simulations_attackpaths, simulations_valuedresources, simulations_valuedresources_attackpaths, valuedresources
2026.05.31.1
  • Updated: assets, bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, sources, sources_findings, attackpaths, resourcevalueconfigs, simulations, simulations_attackexposureresults_attackpaths, simulations_attackexposureresults_valuedresources, simulations_attackpaths, simulations_valuedresources, simulations_valuedresources_attackpaths, valuedresources
2026.05.26.1
  • Updated: sources_findings
2026.05.25.1
  • Updated: assets, bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, sources, sources_findings, attackpaths, resourcevalueconfigs, simulations, simulations_attackexposureresults_attackpaths, simulations_attackexposureresults_valuedresources, simulations_attackpaths, simulations_valuedresources, simulations_valuedresources_attackpaths, valuedresources

Modified 1 models

2026.05.24.1
  • Updated: assets, bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, sources, sources_findings, attackpaths, resourcevalueconfigs, simulations, simulations_attackexposureresults_attackpaths, simulations_attackexposureresults_valuedresources, simulations_attackpaths, simulations_valuedresources, simulations_valuedresources_attackpaths, valuedresources
2026.05.21.2
  • Updated: assets, bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, sources, sources_findings, attackpaths, resourcevalueconfigs, simulations, simulations_attackexposureresults_attackpaths, simulations_attackexposureresults_valuedresources, simulations_attackpaths, simulations_valuedresources, simulations_valuedresources_attackpaths, valuedresources
2026.05.21.1
2026.05.20.1
  • Updated: sources_findings
2026.05.19.2
05Stats
A
100 / 100
Downloads
0
Archive size
167.6 KB
Verified by Swamp
  • Has README or module doc2/2earned
  • README has a code example1/1earned
  • README is substantive1/1earned
  • Most symbols documented1/1earned
  • No slow types (deprecated)1/1earned
  • Dependencies pass trust audit2/2earned
  • Has description1/1earned
  • Platform support declared (or universal)2/2earned
  • License declared1/1earned
  • Verified public repository2/2earned
06Platforms
07Labels