#gcp

Secrets

Google API keys & GCP service-account JSON in the open

A Google API key and a GCP service-account JSON file are not the same risk. One can be locked down; the other is a master key to your cloud project. Both leak the same way.