mirror of
https://github.com/projectdiscovery/nuclei-templates.git
synced 2026-01-31 15:53:33 +08:00
Update template info block and tags
- Update name to follow standard format - Adjust severity from critical to high - Add iam tag - Add metadata with max-request field
This commit is contained in:
@@ -1,9 +1,9 @@
|
||||
id: gcloud-service-account-keys-rotation
|
||||
|
||||
info:
|
||||
name: Service Account Keys without rotation Found
|
||||
name: GCP Service Account Keys - No Rotation Configured
|
||||
author: kelu27
|
||||
severity: critical
|
||||
severity: high
|
||||
description: |
|
||||
Detects Google Cloud Platform (GCP) service account keys that have no rotation enabled.
|
||||
Keys with an expiration date of 9999-12-31T23:59:59 are considered non-rotating and pose security risks if compromised.
|
||||
@@ -15,7 +15,9 @@ info:
|
||||
- https://cloud.google.com/iam/docs/understanding-service-accounts
|
||||
- https://cloud.google.com/iam/docs/best-practices-for-securing-service-accounts
|
||||
- https://cloud.google.com/iam/docs/key-rotation
|
||||
tags: cloud,devops,gcp,gcloud,google-cloud-iam,gcp-cloud-config,security,rotation
|
||||
metadata:
|
||||
max-request: 3
|
||||
tags: cloud,devops,gcp,gcloud,iam,google-cloud-iam,gcp-cloud-config,security,rotation
|
||||
|
||||
flow: |
|
||||
code(1)
|
||||
|
||||
Reference in New Issue
Block a user