DET-C3: Workload image or environment changed on the Confidential VM¶
setMetadata changed tee-image-reference or a tee-env-* value on the workload VM: the next boot runs different code or configuration.
| Property | Value |
|---|---|
| Severity | high |
| Platform | GCP Confidential Space |
| Group | tee |
| Log source | Cloud Audit Logs · Compute |
| Related check | CSPACE-META-01: Confidential VM metadata is not broadly mutable |
Fires when¶
compute.instances.setMetadata AND workload image / tee-env key changed on the workload CVM
How it runs¶
untrust detect --platform sev-snp reads the project's Cloud Audit Logs over the last --since minutes (default 60).
A match is a detection event with this rule's ID. Upload it to the console to alert on it; see Runtime detections.