Google CloudOverview
Google Cloud Functions runtimes follow a lifecycle with general availability, deprecation, and decommissioning phases. Deprecated runtimes lose runtime support, and decommissioned runtimes can block creation or updates and may eventually stop running.
Upgrade functions before runtime decommissioning so security fixes, base image updates, and platform support remain available.
Remediation guidance
Remediation
Upgrade the function to a currently supported runtime. Rebuild dependencies, test triggers, and redeploy with the same operational settings used by the existing function.
gcloud CLI
Replace {{manual.targetRuntime}} with the approved supported runtime, such as nodejs22, python313, go125, java21, ruby34, php84, or dotnet8 where applicable. Keep the trigger, ingress, service account, environment, and generation flags from the current deployment.
gcloud functions deploy {{asset.name}} \
--region {{asset.region}} \
--runtime {{manual.targetRuntime}}
Validate the deployed runtime:
gcloud functions describe {{asset.name}} \
--region {{asset.region}} \
--format='value(runtime)'
Rollout guidance
- Test the runtime change in a non-production project or with a duplicate function and the same trigger type.
- Rebuild native dependencies and confirm Functions Framework compatibility.
- Update Terraform, deployment manifests, or CI/CD templates so the old runtime cannot be redeployed.
- Prioritize functions with public HTTP endpoints, privileged service accounts, or sensitive data paths.
References
- https://docs.cloud.google.com/functions/docs/runtime-support
- https://docs.cloud.google.com/run/docs/runtimes/function-runtimes
Query logic
These are the stored checks tied to this control.
Google Cloud Functions using deprecated or decommissioned runtimes
Connectors
Covered asset types
Expected check: eq []
{
functions(
where: {
cloudProvider: { eq: "gcp" }
runtime_IN: [
"nodejs18"
"nodejs16"
"nodejs14"
"nodejs12"
"nodejs10"
"nodejs8"
"nodejs6"
"python39"
"python38"
"python37"
"go123"
"go122"
"go121"
"go120"
"go119"
"go118"
"go116"
"go113"
"go111"
"java11"
"ruby32"
"ruby30"
"ruby27"
"ruby26"
"php81"
"php74"
"dotnet6"
"dotnet3"
]
}
) {
...AssetFragment
}
}
