Skip to content
All cloud news

Security3 min readD3V Team

Cloud Run Now Scans Your Containers for Vulnerabilities

Padlock resting on a computer circuit board

On 9 November 2026, Google Cloud released Vulnerability Assessment for Cloud Run in preview. It detects vulnerabilities and exposed secrets in the container images of Cloud Run services, jobs and worker pools.

What's new

  • Scanning built into Cloud Run: container images are checked for known vulnerabilities.
  • Exposed secrets: it also looks for secrets left in images, such as keys and passwords.
  • Preview: available to try, but not yet a generally available feature.

Find your real security gaps

CloudCare Security starts with a free assessment that finds the real gaps in your cloud and AI setup.

Free security assessment

Tell us where to reach you. One of our engineers will get back to you within one business day.

Why it matters for your business

Containers bundle your code with libraries and base images that age quickly, and secrets copied into an image by mistake are a common way credentials leak. Having the check where you deploy, rather than in a separate tool someone has to remember, makes it far more likely to happen.

How D3V can help

Source: Cloud Run release notes, Google Cloud.

Wondering what this means for your team?

We'll tell you which of these actually changes anything for a business your size.