Getting Service Account Keys Out of Google Cloud
Long-lived service account keys are the most common serious finding in a GCP assessment. A migration path to Workload Identity that will not break your pipelines.
Insights
GCP Security
1 article on gcp security.
Discuss your security challenges
Tell us what you are trying to secure and where it hurts. We will tell you what we would do first, whether or not you engage us.