> ## Documentation Index > Fetch the complete documentation index at: https://kosli-mbevc1-patch-1.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # kosli snapshot cloud-run > Report a snapshot of Cloud Run services and jobs in a Google Cloud project and region to Kosli. ## Synopsis ```shell theme={"theme":"dracula","languages":{"custom":["/languages/rego.json"]}} kosli snapshot cloud-run ENVIRONMENT-NAME [flags] ``` Report a snapshot of Cloud Run services and jobs in a Google Cloud project and region to Kosli.\ Coverage: | Deploy method | Container? | Reported | Notes | | -------------------------------------------- | ------------------------------------ | -------- | ----------------------------------- | | Cloud Run service (image-deployed) | Yes | ✓ Full | | | Cloud Run service (source / Buildpacks) | Yes (built for you) | ✓ Full | | | Cloud Run Job | Yes | ✓ Full | | | Cloud Run function (Cloud Functions 2nd gen) | Yes (Buildpacks) | ✓ Full | | | Cloud Functions 1st gen | No (Google packages the source) | ✗ | | | App Engine Standard | No (gVisor sandbox, not a container) | ✗ | Not currently supported in the CLI. | | App Engine Flexible | Yes (containers on managed VMs) | ✗ | | | GKE (Standard / Autopilot) | Yes | ✗ | Use `kosli snapshot k8s` instead. | | Cloud Run for Anthos | Yes (knative on GKE) | ✗ | | | Compute Engine + Container-Optimized OS | Yes (Docker on a VM) | ✗ | | Each Cloud Run service contributes one artifact per revision in its traffic configuration. Each Cloud Run Job contributes one artifact, identified by the image bound to the Job (Jobs do not have a revision/traffic-split model). Idle Jobs (no currently-running Execution) are included. GCP authentication uses Application Default Credentials. On a developer machine, run `gcloud auth application-default login`; in GCE/GKE/Cloud Run the metadata server / Workload Identity is used automatically. The caller needs `roles/run.viewer` on the target project, plus `roles/artifactregistry.reader` on the Artifact Registry repository (or the project) for digest and tag resolution on tag-pinned images. Missing the AR role is non-fatal — tag-pinned artifacts then surface with empty digests. Digest and tag resolution is scoped to Artifact Registry (`*-docker.pkg.dev`) and the legacy Container Registry (`*.gcr.io`). Images from other registries (Docker Hub, Quay, ECR, etc.) are reported as-is. Skip all filtering flags to report every service and every job in the given project + region. Use `--include` and/or `--include-regex` to snapshot only a subset, OR `--exclude` and/or `--exclude-regex` to omit a subset; include and exclude are mutually exclusive. Filters apply uniformly to both service and job names and are case-sensitive. Pass `--resolve-names` to rewrite digest-pinned Service artifact names back to their deploy-time tags (commit SHA / version) via an Artifact Registry reverse-lookup. Only supported for Artifact Registry hosts. ## Flags | Flag | Description | | :------------------------ | :-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `-D`, `--dry-run` | \[optional] Run in dry-run mode. When enabled, no data is sent to Kosli and the CLI exits with 0 exit code regardless of any errors. | | `--exclude` strings | \[optional] The comma-separated list of Cloud Run service or job names to exclude. Can't be used together with `--include` or `--include-regex`. | | `--exclude-regex` strings | \[optional] The comma-separated list of Cloud Run service or job name regex patterns to exclude. Can't be used together with `--include` or `--include-regex`. | | `-h`, `--help` | help for cloud-run | | `--include` strings | \[optional] The comma-separated list of Cloud Run service or job names to snapshot. Can't be used together with `--exclude` or `--exclude-regex`. | | `--include-regex` strings | \[optional] The comma-separated list of Cloud Run service or job name regex patterns to snapshot. Can't be used together with `--exclude` or `--exclude-regex`. | | `--project` string | \[required] GCP project ID. | | `--region` string | \[required] GCP region (e.g. europe-west1). | | `--resolve-names` | \[optional] When set, resolve digest-pinned artifact names back to their deploy-time tags (commit SHA / version) via an Artifact Registry reverse-lookup. Requires roles/artifactregistry.reader. Default: artifacts keep whatever name the Cloud Run API returned (digest-pinned for Services, deploy-time form for Jobs). | ## Flags inherited from parent commands | Flag | Description | | :---------------------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------ | | `-a`, `--api-token` string | The Kosli API token. | | `-c`, `--config-file` string | \[optional] The Kosli config file path. (default "kosli") | | `--debug` | \[optional] Print debug logs to stdout. | | `-H`, `--host` string | \[defaulted] The Kosli endpoint. (default "[https://app.kosli.com](https://app.kosli.com)") | | `--http-proxy` string | \[optional] The HTTP proxy URL including protocol and port number. e.g. `http://proxy-server-ip:proxy-port` | | `-r`, `--max-api-retries` int | \[defaulted] How many times should API calls be retried when the API host is not reachable. (default 3) | | `--org` string | The Kosli organization. | | `-q`, `--quiet` | \[optional] Suppress non-critical warning messages. Errors and normal output are not affected. If both `--quiet` and `--debug` are set, `--debug` wins. | ## Examples Use Cases These examples all assume that the flags `--api-token`, `--org`, `--host`, (and `--flow`, `--trail` when required), are [set/provided](/getting_started/install/#assigning-flags-via-environment-variables). ```shell theme={"theme":"dracula","languages":{"custom":["/languages/rego.json"]}} kosli snapshot cloud-run yourEnvironmentName --project yourGCPProject --region yourGCPRegion ``` ```shell theme={"theme":"dracula","languages":{"custom":["/languages/rego.json"]}} kosli snapshot cloud-run yourEnvironmentName --project yourGCPProject --region yourGCPRegion --include hello-world,sandman-job ``` ```shell theme={"theme":"dracula","languages":{"custom":["/languages/rego.json"]}} kosli snapshot cloud-run yourEnvironmentName --project yourGCPProject --region yourGCPRegion --exclude kosli-reporter ```