Starting July 2024, Cloud Build changed the default behavior for how Cloud Build uses service accounts in new projects

## Announcement Starting July 2024, Cloud Build changed the default behavior for how Cloud Build uses service accounts in new projects. This change is detailed in [Cloud Build Service Account Change](https://cloud.google.com/build/docs/cloud-build-service-account-updates) documentation. As a result of this change, new projects [deploying to Cloud Run from source code](https://cloud.google.com/run/docs/deploying-source-code) for the first time may be using a default Cloud Build service account with [insufficient permissions](https://cloud.google.com/resource-manager/docs/organization-policy/restricting-service-accounts#disable%5Fservice%5Faccount%5Fdefault%5Fgrants) for deploying from source. If you are impacted by this change, you can do one of the following: * Review the Cloud Build guidance on changes to the default service account and [opt out of these changes](https://cloud.google.com/build/docs/cloud-build-service-account-updates#what%5Fdo%5Fyou%5Fneed%5Fto%5Fdo). * Grant the [Cloud Build Service Account](https://cloud.google.com/iam/docs/understanding-roles#cloudbuild.builds.builder) (`roles/cloudbuild.builds.builder`) role to the Compute Engine default service account.