{
  "id": "stellaops.secrets.gcp-service-account",
  "version": "1.0.0",
  "name": "GCP Service Account Key",
  "description": "Detects GCP service account JSON key files by their structure",
  "type": "regex",
  "pattern": "\"type\"\\s*:\\s*\"service_account\"[\\s\\S]{0,500}\"private_key\"\\s*:\\s*\"-----BEGIN",
  "severity": "critical",
  "confidence": "high",
  "keywords": ["service_account", "private_key", "gcp", "google", "client_email"],
  "filePatterns": ["*.json"],
  "enabled": true,
  "tags": ["gcp", "google", "cloud", "credentials", "service-account"],
  "references": [
    "https://cloud.google.com/iam/docs/keys-create-delete"
  ]
}