CloudGcp

Google Cloud Application Default Credentials

Application Default Credentials may contain OAuth refresh tokens or service account material used by Google Cloud tooling.

Metadata

id: cloud.gcp.application-default-credentials
category: cloud
sensitivity: critical
subcategory: gcp
artifact types: credential, configuration
tags: gcp, cloud

Path Matchers

Path	Kind	Platforms
`%APPDATA%\gcloud\application_default_credentials.json`	`file`	`windows`
`$HOME/.config/gcloud/application_default_credentials.json`	`file`	`linux`, `macos`

Content Indicators

Literal strings:

client_id
refresh_token

Credential Types

refresh-token
service-account

Impact

cloud_access
credential_access

References

Google Cloud Application Default Credentials

Databricks CLI Config

Databricks CLI configuration profiles can contain workspace hosts, personal access tokens, OAuth client IDs, and OAuth client secrets.

gcloud Configuration

gcloud configuration directories can contain account, project, and credential state.

On this page

Metadata Path Matchers Content Indicators Credential Types Impact References