# Google Cloud Artifact Vulnerability Scan

Google Cloud has an Artifact Registry that you can enable security scans [here](https://cloud.google.com/artifact-registry/docs/analysis). Once a scan is completed, results can be pulled via API/gcloud [here](https://cloud.google.com/artifact-analysis/docs/metadata-storage) and exported to JSON.

### File Types

DefectDojo parser accepts Google Cloud Artifact Vulnerability Scan data as a .json file.

[This issue](https://github.com/DefectDojo/django-DefectDojo/issues/8552) describes the way to retrieve the JSON output.

### Sample Scan Data

Sample reports can be found at [this GitHub repository](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/gcloud_artifact_scan).

### Default Deduplication Hashcode Fields

By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/):

- title
- cwe
- line
- file path
- description