irsl / google-cloud-functions-layer-injector Goto Github PK
View Code? Open in Web Editor NEWSide effect of a (fruitless) security research against the Cloud Functions of Google; this tool allows you to inject an extra layer to the docker image of the function. It is based on TOCTOU, you need to execute it while deploying a new version. It also modifies the image manifest to run the application as root (inside the gVisor sandbox).