picotechllc / spray / 15802354735

65%

push

github

fix: improve credential detection for GKE Workload Identity

- Add detection for Kubernetes service account tokens (/var/run/secrets/kubernetes.io/serviceaccount/token)
- Add detection for common GCP environment variables (GOOGLE_PROJECT_ID, GCP_PROJECT, etc.)
- Resolves issue where GKE pods with Workload Identity were incorrectly using unauthenticated GCS access
- Update tests to cover new credential detection scenarios

This fixes the production issue where authenticated GKE pods were getting 403 errors
when trying to access private bucket configuration files like .spray/redirects.toml

0 of 9 new or added lines in 1 file covered. (0.0%)

744 of 1008 relevant lines covered (73.81%)

5.73 hits per line