MEDIUM
Source
CloudSploit
ID
comment-control-enabled

Comment Control Enabled

Ensure Comment Control is enabled for all cloud build triggers.

Comment control is a configuration which determines if the build will be automatically executed by Github Pull requests trigger. As a security best practice, enable the comment control to ensure that builds are not executed automatically by pull request created by any contributor, and only gets executed when the owner or collaborator comments /gcbrun on the pull request.

Ensure all cloudbuild triggers have comment control enabled.