Skip to content

[GCP] Scans not functioning due to incorrect field name in credential file documentation #2159

Open

Description

@keshavga1209

GCP credential docs

For using the GCP using credential file, it suggests the following format:

{
    "project": "",
    "client_email": "",
    "private_key": ""
}

But, as per this index.js line, one is expected to provide "project_id" and not "project"

Consequences: This mismatch is causing the "project" field provided to be ignored, hence effectively scans are not happening on the project even though it appears it's being scanned, since no error is raised. This can cause false negatives.

Suggestion: Add input validation to surface an explicit error when the required field is missing and rectify the documentation.

If this sounds correct, please assign this issue to me and I can raise the fix.

Activity

  1. hiSandog commented on Jun 28, 2026

    @hiSandog

    This seems like both a docs bug and a validation opportunity. The README should use the field name the scanner actually expects, but the scanner could also detect the common documented shape and return a targeted error such as project_id is required; README previously showed project. That would help users who already copied the old credential template and otherwise just see GCP scans fail.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions