Mods
GCP

IAM Role: GCP/Build Service/Metadata

PermissionGrant
cloudbuild.builds.getMetadata
cloudbuild.builds.listMetadata
source.repos.getMetadata
source.repos.listMetadata