delegationServiceAccountEmail property

This field will contain the service account email address that this attestor will use as the principal when querying Container Analysis.

Attestor administrators must grant this service account the IAM role needed to read attestations from the note_reference in Container Analysis (containeranalysis.notes.occurrences.viewer). This email address is fixed for the lifetime of the attestor, but callers should not make any other assumptions about the service account email; future versions may use an email based on a different naming pattern.

Output only.