Scan firebase hosting and cloud run services [139631023]

Assigned

Feature Request

Status Update

No update yet.

Description

aa...@gmail.com

created issue #1

Aug 18, 2019 04:45PM

Hello, I have some web services running by google cloud platform, I would like to know if I can scan the next gcp resources by cloud security scanner:

- Website using firebase hosting
- SSR Web application using cloud run
- REST API deployed on VM from google cloud engine
- REST API using cloud run

Thanks in advance.

Regards,
Arsenio

Comments

yu...@google.com <yu...@google.com> #2Aug 19, 2019 06:53PM

Assigned to gc...@google.com.

Hi

Right now there is no support for [1] and [3]. However the product team is asking if it is possible to provide more details in regards to items [2] and [4].

[1] Website using firebase hosting
[2] SSR Web application using cloud run
[3] REST API deployed on VM from google cloud engine
[4] REST API using cloud run

jo...@waitwhile.com <jo...@waitwhile.com> #3Aug 22, 2020 11:09PM

I find it frustrating to not be able to use web security scanner for Firebase Hosting. What is preventing this? It seems like an artificial limitation.

rm...@itopia.com <rm...@itopia.com> #4Dec 29, 2020 02:26PM

Hi

It would be great to use the Web Security Scanner for Firebase Hosting sites. Do you have any ETA on this?

Regards

to...@chant.fan <to...@chant.fan> #5Jan 11, 2023 10:37PM

Following up in the hope that Firebase hosting will soon be added to the list of options for web security scanner. The combination of Flutter + Firebase has gained tremendous adoption and would benefit from having this added layer of security scanning.

Any chance this is in the queue?

Thanks!

in...@gmail.com <in...@gmail.com> #6Nov 26, 2024 05:49AM

Our front end is Firebase hosted and supports Google Auth as well as username/password. Our backend API is on App Engine with JWT auth. We can't scan the firebase front end as its not hosted but we need the scanner to authenticate on the front-end's URL before it can scan the back-end. We also request a feature that would support this scenario.

Issue 139631023