# Google Cloud Binary Authorization

**Canonical:** https://apis.io/providers/google-cloud-binary-authorization/  
**Website:** https://cloud.google.com/binary-authorization  
**APIs profiled:** 3

Google Cloud Binary Authorization is a deploy-time security control that ensures only trusted container images are deployed on Google Kubernetes Engine (GKE), Cloud Run, and Anthos clusters. It uses attestation-based policies to validate that container images have been signed by trusted authorities before allowing deployment, helping enforce software supply chain security.

## Kin Score — 55.2 / 100 (strong)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 55.2).

| Facet | Score |
|---|---|
| Discoverability | 74.1 |
| Contract Quality | 63.6 |
| Governance | 9.8 |
| Contract Governance | 9.8 |
| Operational Transparency | 26.3 |
| Developer Ergonomics | 54.8 |
| Commercial Clarity | 47.4 |
| Access Clarity | 47.4 |

Regulatory layer — **Insurance**: 72.7 (matched via tags).

## Agent readiness — 29.1 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Freemium · Self-serve signup — onboarding: self-serve, pricing: freemium, trial: no (confidence: high).

## APIs (3)

- **Google Cloud Binary Authorization Attestations API** — Operations for validating attestations
- **Google Cloud Binary Authorization Attestors API** — Operations for managing attestors
- **Google Cloud Binary Authorization Policy API** — Operations for managing the Binary Authorization policy

## Agentic access (1)

- **Google Cloud Binary Authorization Agentic Access** — 8 operations · 5 acting

## Security (3)

- **Google Cloud Binary Authorization Authentication** — oauth2 · 1 scheme
- **Google Cloud Binary Authorization Domain Security** — TLSv1.3 · HSTS · DMARC
- **Google Cloud Binary Authorization Vulnerability Disclosure** — security.txt · contact published

## Plans (1)

- **Google Cloud Binary Authorization Plans Pricing**

## Tags

Attestation, Container Security, DevSecOps, Kubernetes, Policy Enforcement, Supply Chain Security

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/google-cloud-binary-authorization/). Scores are computed from the provider's own public artifacts under a published rubric.