Read only access to cloud build

We are hosting our project on GitHub.
From what I’ve seen, cloud build can be configured only by an SSH key.

Our company would like to set a read-only access to the build agent, is this possible ? if so, how ?

I know you can set what Github calls a “Deploy key” which can be set to read only. The problem is that cloud build uses a single key per target; our project uses a git submodule, which means i would have to generate 2 different SSH keys for our project to work in cloud build.

How can i properly set up our project to be able to build in the cloud ?

The most straightfoward option is to create a separate user in github with readonly access to your projects and assign the sshkey from Cloud Build to that user.

Thanks for the reply. that’s exactly what we did actually :slight_smile: