Google Cloud Binary Authorization

Google Cloud Binary Authorization is a deploy-time security control that ensures only trusted container images are deployed on Google Kubernetes Engine (GKE), Cloud Run, and Anthos clusters. It uses attestation-based policies to validate that container images have been signed by trusted authorities before allowing deployment, helping enforce software supply chain security.

1 APIs 0 Features

AttestationContainer SecurityDevSecOpsKubernetesPolicy EnforcementSupply Chain Security

APIs

Binary Authorization API

The Binary Authorization API provides programmatic access to manage deploy-time security policies for container images. Developers can use the API to create and manage attestors...

Collections

Google Cloud Binary Authorization API

OPEN

Pricing Plans

Google Cloud Binary Authorization Plans Pricing

3 plans

PLANS

Rate Limits

Google Cloud Binary Authorization Rate Limits

5 limits

RATE LIMITS

FinOps

Google Cloud Binary Authorization Finops

FINOPS

Semantic Vocabularies

Google Cloud Binary Authorization Context

0 classes · 3 properties

JSON-LD

Resources

👥

GitHubOrganization

Sources

opencollection: 1.0.0
info:
  name: Google Cloud Binary Authorization API
  version: v1
request:
  auth:
    type: oauth2
    flow: authorization_code
    authorizationUrl: https://accounts.google.com/o/oauth2/auth
    accessTokenUrl: https://oauth2.googleapis.com/token
    credentials:
      clientId: '{{clientId}}'
      clientSecret: '{{clientSecret}}'
items:
- info:
    name: Policy
    type: folder
  items:
  - info:
      name: Google Cloud Binary Authorization Get project policy
      type: http
    http:
      method: GET
      url: https://binaryauthorization.googleapis.com/v1/projects/:projectId/policy
      params:
      - name: projectId
        value: ''
        type: path
    docs: Gets the policy for a project. Returns a default policy if the project does not have one configured.
  - info:
      name: Google Cloud Binary Authorization Update project policy
      type: http
    http:
      method: PUT
      url: https://binaryauthorization.googleapis.com/v1/projects/:projectId/policy
      params:
      - name: projectId
        value: ''
        type: path
      body:
        type: json
        data: '{}'
    docs: Creates or updates a project's policy.
- info:
    name: Attestors
    type: folder
  items:
  - info:
      name: Google Cloud Binary Authorization List attestors
      type: http
    http:
      method: GET
      url: https://binaryauthorization.googleapis.com/v1/projects/:projectId/attestors
      params:
      - name: projectId
        value: ''
        type: path
      - name: pageSize
        value: ''
        type: query
      - name: pageToken
        value: ''
        type: query
    docs: Lists attestors in a project.
  - info:
      name: Google Cloud Binary Authorization Create an attestor
      type: http
    http:
      method: POST
      url: https://binaryauthorization.googleapis.com/v1/projects/:projectId/attestors
      params:
      - name: projectId
        value: ''
        type: path
      - name: attestorId
        value: ''
        type: query
      body:
        type: json
        data: '{}'
    docs: Creates an attestor in a project.
  - info:
      name: Google Cloud Binary Authorization Get an attestor
      type: http
    http:
      method: GET
      url: https://binaryauthorization.googleapis.com/v1/projects/:projectId/attestors/:attestorId
      params:
      - name: projectId
        value: ''
        type: path
      - name: attestorId
        value: ''
        type: path
    docs: Gets an attestor by resource name.
  - info:
      name: Google Cloud Binary Authorization Update an attestor
      type: http
    http:
      method: PUT
      url: https://binaryauthorization.googleapis.com/v1/projects/:projectId/attestors/:attestorId
      params:
      - name: projectId
        value: ''
        type: path
      - name: attestorId
        value: ''
        type: path
      body:
        type: json
        data: '{}'
    docs: Updates an attestor.
  - info:
      name: Google Cloud Binary Authorization Delete an attestor
      type: http
    http:
      method: DELETE
      url: https://binaryauthorization.googleapis.com/v1/projects/:projectId/attestors/:attestorId
      params:
      - name: projectId
        value: ''
        type: path
      - name: attestorId
        value: ''
        type: path
    docs: Deletes an attestor.
- info:
    name: Attestations
    type: folder
  items:
  - info:
      name: Google Cloud Binary Authorization Validate attestation occurrence
      type: http
    http:
      method: POST
      url: https://binaryauthorization.googleapis.com/v1/projects/:projectId/attestors/:attestorId:validateAttestationOccurrence
      params:
      - name: projectId
        value: ''
        type: path
      - name: attestorId
        value: ''
        type: path
      body:
        type: json
        data: '{}'
    docs: Returns whether the given attestation occurrence is valid.
bundled: true