PkgRadar

PyPI · pypi.org

prowler-cloud

Credential file access: matched "GOOGLE_APPLICATION_CREDENTIALS"

Why PkgRadar flagged 5.30.1

SeveritySignalEvidence
mediumCredential file accessmatched "GOOGLE_APPLICATION_CREDENTIALS" · prowler_cloud-5.30.1/prowler/providers/gcp/gcp_provider.py

Scanned versions

VersionVerdictScoreScanned (UTC)
5.30.1Review502026-06-12
5.30.0Review502026-06-11
5.29.2Review502026-06-03
5.29.1Review502026-06-03
5.29.0Review502026-06-01

Block this in CI

PkgRadar gates prowler-cloud (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi prowler-cloud==5.30.1