The Container Analysis API analyzes your container images and stores metadata using a service account, a special Google Account that collects information about your images on your behalf.
The email for the Container Analysis service account is:
service-[PROJECT_NUMBER]@artifact-analysis.iam.gserviceaccount.com
PROJECT-NUMBER is the project number of the Google Cloud project where Artifact Analysis is enabled.
This account has the Container Analysis Service Agent role.
If you enable vulnerability scanning, the Container Scanning API used by this feature also creates a special Google Account.
The email for the Container Scanning service account is:
service-[PROJECT_NUMBER]@gcp-sa-containerscanning.iam.gserviceaccount.com.
The account uses the Container Scanner Service Agent role.
PROJECT-NUMBER is the project number of the Google Cloud project where Artifact Analysis is enabled.
You can view your project's service accounts in the IAM menu of the Google Cloud console.
What's next
Learn about Artifact Analysis roles and configuring access.