Skip to main content
emisar

Google Cloud IAM diagnostics

v0.1.0

Read-only Google Cloud IAM diagnostics for workload identity providers, workload identity pools, and service-account policies. Every action names the target project and global location explicitly.

3 allowed by default
Pack ID
gcp-iam
Vendor
emisar
OS
linux
Actions
3
Required binaries. Install these on the host before relying on the pack — an action that calls a missing one fails at run time.
gcloud

Install

emisar pack install fetches this pack, re-validates it, and verifies its content hash against the --hash below — the exact bytes this page was rendered against, so a tampered copy is rejected — before copying it into the runner's packs dir. The command reloads a running daemon itself; no manual restart.

on the runner host 
sudo emisar pack install gcp-iam --hash sha256:c8bc2db792a56ae123ea865287e029a0ecf6e95e5790722dcae3ff01449d480b

Actions 3 total

View on GitHub
  • gcp.service_account_policy exec low

    gcloud iam service-accounts get-iam-policy

    Show the IAM policy attached to one service account, including bindings, members, conditions, etag, and policy version.

    View source on GitHub
  • gcp.wif_provider_describe exec low

    gcloud iam workload-identity-pools providers describe

    Describe one global workload identity pool provider, including its issuer, attribute mapping, attribute condition, and enabled or disabled state.

    View source on GitHub
  • gcp.workload_identity_pools exec low

    gcloud iam workload-identity-pools list

    List global workload identity pools in one project, including state, descriptions, and resource names.

    View source on GitHub
← Back to registry
Pack reference Publish your own →