The following configuration settings are required: 

projectId

GCP Project ID to scan

my-gcp-project

privateKeyId

Private key identifier from service account

8d911f4e6fd27332a575283a182bafc13460093f

privateKey

Service account private key in PEM format

-----BEGIN PRIVATE KEY-----...

clientEmail

Service account email address

cert-discovery@project.iam.gserviceaccount.com

clientId

OAuth2 client ID

111813473337277308137

clientX509CertUrl

OAuth2 client certificate URL

https://www.googleapis.com/robot/v1/metadata/x509/...

location

Specific GCP region (scans all locations if empty)

us-central1, global