You are viewing a plain text version of this content. The canonical link for it is here.
Posted to github@beam.apache.org by "github-actions[bot] (via GitHub)" <gi...@apache.org> on 2026/07/01 00:22:55 UTC
[I] Account Keys Compliance Issue Detected [beam]
github-actions[bot] opened a new issue, #39182:
URL: https://github.com/apache/beam/issues/39182
Account keys for project apache-beam-testing are not compliant with the defined policies on ../keys/keys.yaml
- Service account 'github-self-hosted-runners@apache-beam-testing.iam.gserviceaccount.com' is not declared in the service account keys file.
- Service account 'tf-test-dataflow-uzgihx18zf-1@apache-beam-testing.iam.gserviceaccount.com' is not declared in the service account keys file.
- Service account 'secrets-manager@apache-beam-testing.iam.gserviceaccount.com' is not declared in the service account keys file.
- Service account 'dannymccormick-test@apache-beam-testing.iam.gserviceaccount.com' is not declared in the service account keys file.
- Service account 'riteshghorse@apache-beam-testing.iam.gserviceaccount.com' is not declared in the service account keys file.
- Service account 'ahmedabualsaud@apache-beam-testing.iam.gserviceaccount.com' is not declared in the service account keys file.
- Service account 'ml-pipelines-google-vision@apache-beam-testing.iam.gserviceaccount.com' is not declared in the service account keys file.
- Service account 'danoliveira-release@apache-beam-testing.iam.gserviceaccount.com' is not declared in the service account keys file.
- Service account 'prod-playground-sa-cf@apache-beam-testing.iam.gserviceaccount.com' is not declared in the service account keys file.
- Service account 'beam-storage@apache-beam-testing.iam.gserviceaccount.com' is not declared in the service account keys file.
- Service account 'beam-wheels-travis@apache-beam-testing.iam.gserviceaccount.com' is not declared in the service account keys file.
- Service account 'bigquery-admin@apache-beam-testing.iam.gserviceaccount.com' is not declared in the service account keys file.
- Service account 'allows-impersonation-new@apache-beam-testing.iam.gserviceaccount.com' is not declared in the service account keys file.
- Service account 'beam-metrics-posgresql-kube@apache-beam-testing.iam.gserviceaccount.com' is not declared in the service account keys file.
- Service account 'da-pipelines@apache-beam-testing.iam.gserviceaccount.com' is not declared in the service account keys file.
- Service account 'johnjcasey-gha-service-account@apache-beam-testing.iam.gserviceaccount.com' is not declared in the service account keys file.
- Service account 'firebase-adminsdk-dpfsw@apache-beam-testing.iam.gserviceaccount.com' is not declared in the service account keys file.
- Service account 'apache-beam-testing@appspot.gserviceaccount.com' is not declared in the service account keys file.
- Service account 'rrio-tests-63de9ae8@apache-beam-testing.iam.gserviceaccount.com' is not declared in the service account keys file.
- Service account 'prod-playground-sa@apache-beam-testing.iam.gserviceaccount.com' is not declared in the service account keys file.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@beam.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Account Keys Compliance Issue Detected [beam]
Posted by "cschanhniem (via GitHub)" <gi...@apache.org>.
cschanhniem commented on issue #39182:
URL: https://github.com/apache/beam/issues/39182#issuecomment-4917489102
Important compliance issue — undocumented service accounts in GCP IAM are a common governance gap. For repos managing access from CI/CD workflows and AI agents, [AGENTOWNERS](https://github.com/agent-owners/agentowners) provides a policy layer to define which automated actors may access which resources, complementing infrastructure-level IAM with repo-level agent governance.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@beam.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Account Keys Compliance Issue Detected [beam]
Posted by "Amar3tto (via GitHub)" <gi...@apache.org>.
Amar3tto commented on issue #39182:
URL: https://github.com/apache/beam/issues/39182#issuecomment-5201279230
@pabloem Hi, could you please take a look? Also, do we need these emails daily, or would once per month be enough?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@beam.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org