google / gcp_scanner

A comprehensive scanner for Google Cloud
Apache License 2.0
305 stars 95 forks source link

Proper results output handling for multiple SA having access to the same project_id #226

Open mshudrak opened 1 year ago

mshudrak commented 1 year ago

Is your feature request related to a problem? Please describe. We are currently dumping results per project_id. However, if two SA have access to the same project, we will have two files for the same project from two different identities.

Describe the solution you'd like We can either add service account name in the name of the file or merge same projects info into one file. The latter solution requires us to change timestamp in the name of the file.

Describe alternatives you've considered We can leave it as it is now and avoid changing anything. User has information about identity that was used to query the file in the output.