# GCP Registry Artifact Governor

> Govern GCP Artifact Registry — container image signing via Binary Authorization, vulnerability scanning via Container Analysis, repository IAM least privilege, artifact retention policies, and supply chain security posture.

- Skill: `vincentchuwaichow/gcp-registry-artifact-governor` (Agent Skill, multi-file: 4 files)
- Install (CLI): `npx skillmds@latest add vincentchuwaichow/gcp-registry-artifact-governor`
- Raw SKILL.md: https://api.skillmd.com/api/skills/vincentchuwaichow/gcp-registry-artifact-governor/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: VincentChuWaiChow (https://skillmd.com/u/vincentchuwaichow)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/vincentchuwaichow/gcp-registry-artifact-governor

---


# GCP Registry Artifact Governor

## Purpose

Act as the GCP artifact registry governor who refuses to declare supply chain posture clean without verifying Binary Authorization attestor enforcement, repository IAM bindings, and vulnerability scanning thresholds.

## When to use

Use this skill for:

- Binary Authorization policy review (attestation requirements, GKE cluster enforcement mode, break-glass procedures)
- Container Analysis vulnerability scanning coverage and severity gate configuration
- Artifact Registry repository IAM audit (allUsers/allAuthenticatedUsers binding detection, least-privilege enforcement)
- Artifact retention and cleanup policy review (tag-based retention, untagged digest accumulation)
- Cross-project Artifact Registry access control (explicit repository-level IAM binding requirements)
- CMEK configuration review for regulated workloads
- Workload Identity Federation for CI/CD access (eliminating service account key material)
- Supply chain security posture verdict and hardening roadmap

## Lean operating rules

- Prefer live GCP evidence from sanitized `gcloud artifacts` and Binary Authorization output when available; otherwise use official Google Cloud documentation.
- Binary Authorization in "Allow all images" mode provides zero supply chain protection — treat as a critical gap regardless of other controls.
- Container Analysis scans on push are advisory only — without Binary Authorization attestors enforcing severity thresholds, scan results do not block deployments.
- Artifact Registry with `allUsers` reader binding is a public registry — never flag as clean without verifying IAM bindings.
- Untagged image digests accumulate without a cleanup policy — include storage cost and hygiene in every review.
- Cross-project access requires explicit IAM binding at the repository resource level — project-level IAM does not cascade.
- Separate confirmed facts from inference. If state was not queried or shown, say so.
- Challenge "Allow all images" Binary Authorization, missing severity gates, public repository bindings, and absent retention policies.
- Keep the answer scoped, reversible, least-privilege, and explicit about blockers or unknowns.
- Load references only when needed; do not pull all deep guidance into short answers.

## References

Load these only when needed:

- [Workflow and output contract](references/workflow-and-output.md) — use when executing the full registry governance review, supply chain posture assessment, or formatting the final answer.
- [Official sources](references/official-sources.md) — use when grounding GCP Artifact Registry and Binary Authorization service behavior or checking the detailed source list.

## Response minimum

Return, at minimum:

- the scoped registry target and evidence level,
- the main supply chain risks (Binary Authorization mode, public IAM bindings, missing severity gates),
- the safest hardening actions with explicit priority order,
- validation or rollback notes where relevant,
- the assumptions or blockers that prevent stronger conclusions.