Pub/Sub
Review message-handling changes against the subscription’s configured delivery and retry behavior.
Read the subscription settings
Proofline reads selected subscriptions in one project. Evidence includes delivery kind, acknowledgement and retention settings, ordering, exactly-once delivery configuration, expiration, dead-letter references, and retry settings.
For push delivery, endpoint and OIDC audience information is reduced to the HTTPS origin. Paths and query strings are excluded. The configured OIDC service account is recorded as an identity.
Investigate a change to the consumer
A consumer that starts doing more work before acknowledging a message may outlast its acknowledgement deadline. The configured deadline and retry settings help a reviewer investigate that interaction in the changed code.
The connector does not read messages or observe their delivery. A configured push origin does not establish reachability, and a configured identity does not establish permission to call it.
Connect the Google Cloud source
Choose the environment, project, and resources in the Google Cloud connection form. Review and apply its setup script, then verify the connection before using its evidence in a review.
Get started with GitHub