The default service account has full project access. Instances should instead be assigned the minimal access they need.
Instance has full access to the project
Remove use of default service account
The following example will fail the google-compute-no-default-service-account check.
The following example will pass the google-compute-no-default-service-account check.