Gcp/securitycenter
@swamp/gcp/securitycenterv2026.07.21.3
01README
Google Cloud securitycenter infrastructure models
02Release Notes
- Updated: assets, bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, sources, sources_findings, attackpaths, resourcevalueconfigs, simulations, simulations_attackexposureresults_attackpaths, simulations_attackexposureresults_valuedresources, simulations_attackpaths, simulations_valuedresources, simulations_valuedresources_attackpaths, valuedresources
03Models
assets.tsv2026.07.21.3
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessToken? | string | GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| credentialsJson? | string | GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| project? | string | GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables. |
| scopes? | string | Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes. |
| parent? | string | The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456) |
fn get(identifier: string)
Get a assets
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the assets |
fn sync(identifier?: string)
Sync assets state from GCP
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific assets by name (e.g. one discovered by list) |
fn list(compareDuration?: string, fieldMask?: string, filter?: string, orderBy?: string, pageSize?: number, readTime?: string, maxPages?: number)
List assets resources
| Argument | Type | Description |
|---|---|---|
| compareDuration? | string | |
| fieldMask? | string | |
| filter? | string | |
| orderBy? | string | |
| pageSize? | number | |
| readTime? | string | |
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
fn group(compareDuration?: any, filter?: any, groupBy?: any, pageSize?: any, pageToken?: any, readTime?: any)
group
| Argument | Type | Description |
|---|---|---|
| compareDuration? | any | |
| filter? | any | |
| groupBy? | any | |
| pageSize? | any | |
| pageToken? | any | |
| readTime? | any |
fn update_security_marks(canonicalName?: any, marks?: any, name?: any)
update security marks
| Argument | Type | Description |
|---|---|---|
| canonicalName? | any | |
| marks? | any | |
| name? | any |
attackpaths.tsv2026.07.21.3
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessToken? | string | GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| credentialsJson? | string | GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| project? | string | GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables. |
| scopes? | string | Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes. |
| parent? | string | The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456) |
fn get(identifier: string)
Get a attackPaths
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the attackPaths |
fn sync(identifier?: string)
Sync attackPaths state from GCP
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific attackPaths by name (e.g. one discovered by list) |
fn list(filter?: string, pageSize?: number, maxPages?: number)
List attackPaths resources
| Argument | Type | Description |
|---|---|---|
| filter? | string | |
| pageSize? | number | |
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
bigqueryexports.tsv2026.07.21.3
Global Arguments
| Argument | Type | Description |
|---|---|---|
| accessToken? | string | GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| credentialsJson? | string | GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| project? | string | GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables. |
| scopes? | string | Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes. |
| createTime? | string | |
| dataset? | string | |
| description? | string | |
| filter? | string | |
| mostRecentEditor? | string | |
| name? | string | |
| principal? | string | |
| updateTime? | string | |
| bigQueryExportId? | string | The bigQueryExportId for this resource |
| parent? | string | The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456) |
fn create()
Create a bigQueryExports
fn get(identifier: string)
Get a bigQueryExports
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the bigQueryExports |
fn update(identifier?: string)
Update bigQueryExports attributes
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific bigQueryExports by name (e.g. one discovered by list) |
fn delete(identifier: string)
Delete the bigQueryExports
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the bigQueryExports |
fn sync(identifier?: string)
Sync bigQueryExports state from GCP
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific bigQueryExports by name (e.g. one discovered by list) |
fn list(pageSize?: number, maxPages?: number)
List bigQueryExports resources
| Argument | Type | Description |
|---|---|---|
| pageSize? | number | |
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
eventthreatdetectionsettings_custommodules.tsv2026.07.21.3
Global Arguments
| Argument | Type | Description |
|---|---|---|
| accessToken? | string | GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| credentialsJson? | string | GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| project? | string | GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables. |
| scopes? | string | Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes. |
| ancestorModule? | string | |
| cloudProvider? | enum | |
| config? | record | |
| description? | string | |
| displayName? | string | |
| enablementState? | enum | |
| lastEditor? | string | |
| name? | string | |
| type? | string | |
| updateTime? | string | |
| parent? | string | The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456) |
fn create()
Create a customModules
fn get(identifier: string)
Get a customModules
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the customModules |
fn update(identifier?: string)
Update customModules attributes
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific customModules by name (e.g. one discovered by list) |
fn delete(identifier: string)
Delete the customModules
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the customModules |
fn sync(identifier?: string)
Sync customModules state from GCP
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific customModules by name (e.g. one discovered by list) |
fn list(pageSize?: number, maxPages?: number)
List customModules resources
| Argument | Type | Description |
|---|---|---|
| pageSize? | number | |
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
fn list_descendant()
list descendant
eventthreatdetectionsettings_effectivecustommodules.tsv2026.07.21.3
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessToken? | string | GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| credentialsJson? | string | GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| project? | string | GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables. |
| scopes? | string | Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes. |
| parent? | string | The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456) |
fn get(identifier: string)
Get a effectiveCustomModules
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the effectiveCustomModules |
fn sync(identifier?: string)
Sync effectiveCustomModules state from GCP
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific effectiveCustomModules by name (e.g. one discovered by list) |
fn list(pageSize?: number, maxPages?: number)
List effectiveCustomModules resources
| Argument | Type | Description |
|---|---|---|
| pageSize? | number | |
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
muteconfigs.tsv2026.07.21.3
Global Arguments
| Argument | Type | Description |
|---|---|---|
| accessToken? | string | GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| credentialsJson? | string | GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| project? | string | GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables. |
| scopes? | string | Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes. |
| createTime? | string | |
| description? | string | |
| expiryTime? | string | |
| filter? | string | |
| mostRecentEditor? | string | |
| name? | string | |
| type? | enum | |
| updateTime? | string |
fn get(identifier: string)
Get a muteConfigs
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the muteConfigs |
fn update(identifier?: string)
Update muteConfigs attributes
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific muteConfigs by name (e.g. one discovered by list) |
fn delete(identifier: string)
Delete the muteConfigs
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the muteConfigs |
fn sync(identifier?: string)
Sync muteConfigs state from GCP
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific muteConfigs by name (e.g. one discovered by list) |
notificationconfigs.tsv2026.07.21.3
Global Arguments
| Argument | Type | Description |
|---|---|---|
| accessToken? | string | GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| credentialsJson? | string | GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| project? | string | GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables. |
| scopes? | string | Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes. |
| description? | string | |
| name? | string | |
| pubsubTopic? | string | |
| serviceAccount? | string | |
| streamingConfig? | object | |
| configId? | string | The configId for this resource |
| parent? | string | The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456) |
fn create()
Create a notificationConfigs
fn get(identifier: string)
Get a notificationConfigs
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the notificationConfigs |
fn update(identifier?: string)
Update notificationConfigs attributes
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific notificationConfigs by name (e.g. one discovered by list) |
fn delete(identifier: string)
Delete the notificationConfigs
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the notificationConfigs |
fn sync(identifier?: string)
Sync notificationConfigs state from GCP
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific notificationConfigs by name (e.g. one discovered by list) |
fn list(pageSize?: number, maxPages?: number)
List notificationConfigs resources
| Argument | Type | Description |
|---|---|---|
| pageSize? | number | |
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
resourcevalueconfigs.tsv2026.07.21.3
Global Arguments
| Argument | Type | Description |
|---|---|---|
| accessToken? | string | GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| credentialsJson? | string | GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| project? | string | GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables. |
| scopes? | string | Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes. |
| cloudProvider? | enum | |
| createTime? | string | |
| description? | string | |
| name? | string | |
| resourceLabelsSelector? | record | |
| resourceType? | string | |
| resourceValue? | enum | |
| scope? | string | |
| sensitiveDataProtectionMapping? | object | |
| tagValues? | array | |
| updateTime? | string | |
| parent? | string | The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456) |
fn get(identifier: string)
Get a resourceValueConfigs
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the resourceValueConfigs |
fn update(identifier?: string)
Update resourceValueConfigs attributes
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific resourceValueConfigs by name (e.g. one discovered by list) |
fn delete(identifier: string)
Delete the resourceValueConfigs
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the resourceValueConfigs |
fn sync(identifier?: string)
Sync resourceValueConfigs state from GCP
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific resourceValueConfigs by name (e.g. one discovered by list) |
fn list(pageSize?: number, maxPages?: number)
List resourceValueConfigs resources
| Argument | Type | Description |
|---|---|---|
| pageSize? | number | |
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
fn batch_create(requests?: any)
batch create
| Argument | Type | Description |
|---|---|---|
| requests? | any |
securityhealthanalyticssettings_custommodules.tsv2026.07.21.3
Global Arguments
| Argument | Type | Description |
|---|---|---|
| accessToken? | string | GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| credentialsJson? | string | GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| project? | string | GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables. |
| scopes? | string | Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes. |
| ancestorModule? | string | |
| cloudProvider? | enum | |
| customConfig? | object | |
| displayName? | string | |
| enablementState? | enum | |
| lastEditor? | string | |
| name? | string | |
| updateTime? | string | |
| parent? | string | The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456) |
fn create()
Create a customModules
fn get(identifier: string)
Get a customModules
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the customModules |
fn update(identifier?: string)
Update customModules attributes
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific customModules by name (e.g. one discovered by list) |
fn delete(identifier: string)
Delete the customModules
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the customModules |
fn sync(identifier?: string)
Sync customModules state from GCP
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific customModules by name (e.g. one discovered by list) |
fn list(pageSize?: number, maxPages?: number)
List customModules resources
| Argument | Type | Description |
|---|---|---|
| pageSize? | number | |
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
fn list_descendant()
list descendant
fn simulate(customConfig?: any, resource?: any)
simulate
| Argument | Type | Description |
|---|---|---|
| customConfig? | any | |
| resource? | any |
securityhealthanalyticssettings_effectivecustommodules.tsv2026.07.21.3
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessToken? | string | GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| credentialsJson? | string | GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| project? | string | GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables. |
| scopes? | string | Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes. |
| parent? | string | The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456) |
fn get(identifier: string)
Get a effectiveCustomModules
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the effectiveCustomModules |
fn sync(identifier?: string)
Sync effectiveCustomModules state from GCP
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific effectiveCustomModules by name (e.g. one discovered by list) |
fn list(pageSize?: number, maxPages?: number)
List effectiveCustomModules resources
| Argument | Type | Description |
|---|---|---|
| pageSize? | number | |
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
simulations.tsv2026.07.21.3
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessToken? | string | GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| credentialsJson? | string | GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| project? | string | GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables. |
| scopes? | string | Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes. |
fn get(identifier: string)
Get a simulations
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the simulations |
fn sync(identifier?: string)
Sync simulations state from GCP
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific simulations by name (e.g. one discovered by list) |
simulations_attackexposureresults_attackpaths.tsv2026.07.21.3
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessToken? | string | GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| credentialsJson? | string | GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| project? | string | GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables. |
| scopes? | string | Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes. |
| parent? | string | The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456) |
fn get(identifier: string)
Get a attackPaths
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the attackPaths |
fn sync(identifier?: string)
Sync attackPaths state from GCP
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific attackPaths by name (e.g. one discovered by list) |
fn list(filter?: string, pageSize?: number, maxPages?: number)
List attackPaths resources
| Argument | Type | Description |
|---|---|---|
| filter? | string | |
| pageSize? | number | |
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
simulations_attackexposureresults_valuedresources.tsv2026.07.21.3
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessToken? | string | GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| credentialsJson? | string | GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| project? | string | GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables. |
| scopes? | string | Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes. |
| parent? | string | The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456) |
fn get(identifier: string)
Get a valuedResources
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the valuedResources |
fn sync(identifier?: string)
Sync valuedResources state from GCP
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific valuedResources by name (e.g. one discovered by list) |
fn list(filter?: string, orderBy?: string, pageSize?: number, maxPages?: number)
List valuedResources resources
| Argument | Type | Description |
|---|---|---|
| filter? | string | |
| orderBy? | string | |
| pageSize? | number | |
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
simulations_attackpaths.tsv2026.07.21.3
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessToken? | string | GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| credentialsJson? | string | GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| project? | string | GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables. |
| scopes? | string | Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes. |
| parent? | string | The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456) |
fn get(identifier: string)
Get a attackPaths
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the attackPaths |
fn sync(identifier?: string)
Sync attackPaths state from GCP
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific attackPaths by name (e.g. one discovered by list) |
fn list(filter?: string, pageSize?: number, maxPages?: number)
List attackPaths resources
| Argument | Type | Description |
|---|---|---|
| filter? | string | |
| pageSize? | number | |
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
simulations_valuedresources.tsv2026.07.21.3
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessToken? | string | GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| credentialsJson? | string | GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| project? | string | GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables. |
| scopes? | string | Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes. |
| parent? | string | The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456) |
fn get(identifier: string)
Get a valuedResources
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the valuedResources |
fn sync(identifier?: string)
Sync valuedResources state from GCP
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific valuedResources by name (e.g. one discovered by list) |
fn list(filter?: string, orderBy?: string, pageSize?: number, maxPages?: number)
List valuedResources resources
| Argument | Type | Description |
|---|---|---|
| filter? | string | |
| orderBy? | string | |
| pageSize? | number | |
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
simulations_valuedresources_attackpaths.tsv2026.07.21.3
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessToken? | string | GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| credentialsJson? | string | GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| project? | string | GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables. |
| scopes? | string | Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes. |
| parent? | string | The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456) |
fn get(identifier: string)
Get a attackPaths
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the attackPaths |
fn sync(identifier?: string)
Sync attackPaths state from GCP
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific attackPaths by name (e.g. one discovered by list) |
fn list(filter?: string, pageSize?: number, maxPages?: number)
List attackPaths resources
| Argument | Type | Description |
|---|---|---|
| filter? | string | |
| pageSize? | number | |
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
sources.tsv2026.07.21.3
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessToken? | string | GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| credentialsJson? | string | GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| project? | string | GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables. |
| scopes? | string | Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes. |
| parent? | string | The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456) |
fn get(identifier: string)
Get a sources
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the sources |
fn sync(identifier?: string)
Sync sources state from GCP
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific sources by name (e.g. one discovered by list) |
fn list(pageSize?: number, maxPages?: number)
List sources resources
| Argument | Type | Description |
|---|---|---|
| pageSize? | number | |
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
sources_findings.tsv2026.07.21.3
Global Arguments
| Argument | Type | Description |
|---|---|---|
| accessToken? | string | GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| credentialsJson? | string | GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| project? | string | GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables. |
| scopes? | string | Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes. |
| access? | object | |
| affectedResources? | object | |
| agent? | object | |
| agentAnomaly? | object | |
| agentDataAccessEvents? | array | |
| agentSessions? | array | |
| aiModel? | object | |
| application? | object | |
| artifactGuardPolicies? | object | |
| attackExposure? | object | |
| backupDisasterRecovery? | object | |
| canonicalName? | string | |
| category? | string | |
| chokepoint? | object | |
| cloudArmor? | object | |
| cloudDlpDataProfile? | object | |
| cloudDlpInspection? | object | |
| complianceDetails? | object | |
| compliances? | array | |
| connections? | array | |
| contacts? | record | |
| containers? | array | |
| createTime? | string | |
| dataAccessEvents? | array | |
| dataFlowEvents? | array | |
| dataRetentionDeletionEvents? | array | |
| database? | object | |
| description? | string | |
| discoveredWorkload? | object | |
| disk? | object | |
| eventTime? | string | |
| exfiltration? | object | |
| externalExposure? | object | |
| externalSystems? | record | |
| externalUri? | string | |
| files? | array | |
| findingClass? | enum | |
| groupMemberships? | array | |
| iamBindings? | array | |
| iamDetails? | object | |
| indicator? | object | |
| ipRules? | object | |
| job? | object | |
| kernelRootkit? | object | |
| kubernetes? | object | |
| loadBalancers? | array | |
| logEntries? | array | |
| mitreAttack? | object | |
| moduleName? | string | |
| mute? | enum | |
| muteInfo? | object | |
| muteInitiator? | string | |
| muteUpdateTime? | string | |
| name? | string | |
| networks? | array | |
| nextSteps? | string | |
| notebook? | object | |
| orgPolicies? | array | |
| parent? | string | |
| parentDisplayName? | string | |
| policyViolationSummary? | object | |
| processes? | array | |
| resourceName? | string | |
| secret? | object | |
| securityMarks? | object | |
| securityPosture? | object | |
| severity? | enum | |
| sourceProperties? | record | |
| state? | enum | |
| toxicCombination? | object | |
| vertexAi? | object | |
| vulnerability? | object |
fn get(identifier: string)
Get a findings
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the findings |
fn update(identifier?: string)
Update findings attributes
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific findings by name (e.g. one discovered by list) |
fn sync(identifier?: string)
Sync findings state from GCP
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific findings by name (e.g. one discovered by list) |
fn list(fieldMask?: string, filter?: string, orderBy?: string, pageSize?: number, maxPages?: number)
List findings resources
| Argument | Type | Description |
|---|---|---|
| fieldMask? | string | |
| filter? | string | |
| orderBy? | string | |
| pageSize? | number | |
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
fn group(compareDuration?: any, filter?: any, groupBy?: any, pageSize?: any, pageToken?: any, readTime?: any)
group
| Argument | Type | Description |
|---|---|---|
| compareDuration? | any | |
| filter? | any | |
| groupBy? | any | |
| pageSize? | any | |
| pageToken? | any | |
| readTime? | any |
fn set_mute(mute?: any)
set mute
| Argument | Type | Description |
|---|---|---|
| mute? | any |
fn set_state(startTime?: any, state?: any)
set state
| Argument | Type | Description |
|---|---|---|
| startTime? | any | |
| state? | any |
fn update_security_marks(canonicalName?: any, marks?: any, name?: any)
update security marks
| Argument | Type | Description |
|---|---|---|
| canonicalName? | any | |
| marks? | any | |
| name? | any |
valuedresources.tsv2026.07.21.3
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessToken? | string | GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| credentialsJson? | string | GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| project? | string | GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables. |
| scopes? | string | Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes. |
| parent? | string | The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456) |
fn get(identifier: string)
Get a valuedResources
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the valuedResources |
fn sync(identifier?: string)
Sync valuedResources state from GCP
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific valuedResources by name (e.g. one discovered by list) |
fn list(filter?: string, orderBy?: string, pageSize?: number, maxPages?: number)
List valuedResources resources
| Argument | Type | Description |
|---|---|---|
| filter? | string | |
| orderBy? | string | |
| pageSize? | number | |
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
04Previous Versions
2026.07.20.2
- Updated: assets, bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, sources, sources_findings, attackpaths, resourcevalueconfigs, simulations, simulations_attackexposureresults_attackpaths, simulations_attackexposureresults_valuedresources, simulations_attackpaths, simulations_valuedresources, simulations_valuedresources_attackpaths, valuedresources
2026.07.20.1
- Updated: assets, bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, sources, sources_findings, attackpaths, resourcevalueconfigs, simulations, simulations_attackexposureresults_attackpaths, simulations_attackexposureresults_valuedresources, simulations_attackpaths, simulations_valuedresources, simulations_valuedresources_attackpaths, valuedresources
2026.07.19.1
- Updated: assets, bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, sources, sources_findings, attackpaths, resourcevalueconfigs, simulations, simulations_attackexposureresults_attackpaths, simulations_attackexposureresults_valuedresources, simulations_attackpaths, simulations_valuedresources, simulations_valuedresources_attackpaths, valuedresources
2026.07.18.2
- Updated: assets, bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, sources, sources_findings, attackpaths, resourcevalueconfigs, simulations, simulations_attackexposureresults_attackpaths, simulations_attackexposureresults_valuedresources, simulations_attackpaths, simulations_valuedresources, simulations_valuedresources_attackpaths, valuedresources
2026.07.17.2
- Updated: bigqueryexports, eventthreatdetectionsettings_custommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, sources_findings, resourcevalueconfigs
2026.07.17.1
- Updated: bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, resourcevalueconfigs, simulations_valuedresources
2026.07.15.1
- Updated: sources_findings
2026.06.27.1
- Updated: sources_findings
2026.06.24.1
- Updated: sources_findings
2026.06.08.2
- Updated: assets, bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, sources, sources_findings, attackpaths, resourcevalueconfigs, simulations, simulations_attackexposureresults_attackpaths, simulations_attackexposureresults_valuedresources, simulations_attackpaths, simulations_valuedresources, simulations_valuedresources_attackpaths, valuedresources
2026.06.07.1
- Updated: assets, bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, sources, sources_findings, attackpaths, resourcevalueconfigs, simulations, simulations_attackexposureresults_attackpaths, simulations_attackexposureresults_valuedresources, simulations_attackpaths, simulations_valuedresources, simulations_valuedresources_attackpaths, valuedresources
2026.05.31.1
- Updated: assets, bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, sources, sources_findings, attackpaths, resourcevalueconfigs, simulations, simulations_attackexposureresults_attackpaths, simulations_attackexposureresults_valuedresources, simulations_attackpaths, simulations_valuedresources, simulations_valuedresources_attackpaths, valuedresources
2026.05.26.1
- Updated: sources_findings
2026.05.25.1
- Updated: assets, bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, sources, sources_findings, attackpaths, resourcevalueconfigs, simulations, simulations_attackexposureresults_attackpaths, simulations_attackexposureresults_valuedresources, simulations_attackpaths, simulations_valuedresources, simulations_valuedresources_attackpaths, valuedresources
Modified 1 models
2026.05.24.1
- Updated: assets, bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, sources, sources_findings, attackpaths, resourcevalueconfigs, simulations, simulations_attackexposureresults_attackpaths, simulations_attackexposureresults_valuedresources, simulations_attackpaths, simulations_valuedresources, simulations_valuedresources_attackpaths, valuedresources
2026.05.21.2
- Updated: assets, bigqueryexports, eventthreatdetectionsettings_custommodules, eventthreatdetectionsettings_effectivecustommodules, muteconfigs, notificationconfigs, securityhealthanalyticssettings_custommodules, securityhealthanalyticssettings_effectivecustommodules, sources, sources_findings, attackpaths, resourcevalueconfigs, simulations, simulations_attackexposureresults_attackpaths, simulations_attackexposureresults_valuedresources, simulations_attackpaths, simulations_valuedresources, simulations_valuedresources_attackpaths, valuedresources
2026.05.21.1
2026.05.20.1
- Updated: sources_findings
2026.05.19.2
05Stats
A
100 / 100
Downloads
0
Archive size
167.6 KB
Verified by Swamp
- Has README or module doc2/2earned
- README has a code example1/1earned
- README is substantive1/1earned
- Most symbols documented1/1earned
- No slow types (deprecated)1/1earned
- Dependencies pass trust audit2/2earned
- Has description1/1earned
- Platform support declared (or universal)2/2earned
- License declared1/1earned
- Verified public repository2/2earned
06Platforms
07Labels