domains / families / security / google-cloud-scc-query

google-cloud-scc-query

separate

Queries and retrieves active security findings, external exposures, toxic combinations, vulnerabilities, threats, and sensitive data risks from Security Command Center on Google Cloud. Use when retrieving details for a security finding by its name, validating finding scope (e.g., verifying findingClass is TOXIC_COMBINATION, VULNERABILITY, EXTERNAL_EXPOSURE, or THREAT), or fetching finding details for triage. Don't use to draft remediations, apply patches, or execute configurations.

When to use

• retrieving details for a security finding by its name
• validating finding scope
• fetching finding details for triage
• querying active security findings
• retrieving external exposures
• retrieving toxic combinations
• retrieving vulnerabilities
• retrieving threats

When not to use

• draft remediations
• apply patches
• execute configurations
• query attack path resources
• describe underlying Google Cloud resources
• verify underlying Google Cloud resources

Skill page

Source