There are two services you can use
Web Security Scanner - this will scan your application (hosted either on App Engine or Compute Engine) for vulnerablities - e.g. outdated libraries, hackable scripts etc.
Vulnerability Scanner - This is primarily to scan docker images and artifact registries.
I am passionate about getting cloud solutions right the first time. I help customers transition to the public cloud with the appropriate security controls and guardrails. GCP, AWS and Azure Security Specialist. <a href="https://calendly.com/anujvarma/google-cloud-architect-initial-consultation">Initial Consultation</a>