grc.store

Search / finos-ccc/ccc.blocstor.cp / v2026.07-rc

Release · v2026.07-rc

FINOS-CCC/CCC.BlocStor.CP Capability Catalog

FINOS-CCC/CCC.BlocStor.CP

Capabilities for Block Storage technologies, as defined by the FINOS Common Cloud Controls project.

Published by FINOS Common Cloud Controls

License Community-Spec-1.0

Install

OCI v1.1
$grcli unpack --repository finos-ccc/ccc.blocstor.cp --version v2026.07-rc

grcli unpack verifies this signature against the recorded identity below and fails closed before writing any files — no separate verify step needed. Pass --no-verify to skip.

Coordinate
oci.grc.store/finos-ccc/ccc.blocstor.cp:v2026.07-rc
Manifest digest
sha256:eda98cc45b6950183ac596c11c4343f8b8011372146a0e1bfe7fc0256106ab67
Signed by
no signature recorded

Identity recorded by this hub when the version was published; unpack (above) checks the signature against it.

Verify in CI — check the signature without downloading
$grcli verify --repository finos-ccc/ccc.blocstor.cp --version v2026.07-rc

Read-only: downloads nothing and exits non-zero if the signature or the recorded identity doesn't match — use it as an admission/policy gate.

Provenance

1 layer
Digest Media type Size
115e939a3a11… application/vnd.gemara.artifact.v1+yaml 5.7 KiB
Bundle config blob 
{
  "bundle-version": "1.0",
  "gemara-version": "v1.2.0",
  "metadata": {
    "provenance": {
      "buildDefinition": {
        "buildType": "https://grc.store/grcli/buildtype/v0",
        "externalParameters": {
          "artifact": {
            "id": "CCC.BlocStor.CP",
            "type": "CapabilityCatalog"
          },
          "target": {
            "registry": "oci.grc.store",
            "repository": "finos-ccc/ccc.blocstor.cp",
            "tag": "v2026.07-rc"
          }
        },
        "internalParameters": {
          "CI": "true",
          "GITHUB_ACTIONS": "true",
          "GITHUB_ACTOR": "eddie-knight",
          "GITHUB_REF": "refs/heads/main",
          "GITHUB_REPOSITORY": "eddie-knight/common-cloud-controls",
          "GITHUB_RUN_ATTEMPT": "1",
          "GITHUB_RUN_ID": "28763687249",
          "GITHUB_SHA": "3e4a2c0ef4b966fcf7c8e2f0fd4f8da3f6ae02e1",
          "GITHUB_WORKFLOW": "Batch Release All Catalogs",
          "RUNNER_OS": "Linux"
        },
        "resolvedDependencies": [
          {
            "name": "artifacts/storage/block/capabilities.yaml",
            "uri": "file://artifacts/storage/block/capabilities.yaml",
            "digest": {
              "sha256": "115e939a3a1109bb55b4776713c1b0ed0e7763a9065d914cff6cc8e9f8676978"
            }
          },
          {
            "name": "source",
            "uri": "git+https://github.com/eddie-knight/common-cloud-controls@3e4a2c0ef4b966fcf7c8e2f0fd4f8da3f6ae02e1",
            "digest": {
              "gitCommit": "3e4a2c0ef4b966fcf7c8e2f0fd4f8da3f6ae02e1"
            }
          }
        ]
      },
      "runDetails": {
        "builder": {
          "id": "https://github.com/eddie-knight/common-cloud-controls/actions/runs/28763687249",
          "version": {
            "go": "go1.25.0",
            "go-arch": "amd64",
            "go-os": "linux",
            "grcli": "v0.4.1"
          }
        },
        "metadata": {
          "invocationId": "28763687249-1",
          "startedOn": "2026-07-06T02:26:50.075771545Z",
          "finishedOn": "2026-07-06T02:26:50.551483866Z"
        },
        "byproducts": [
          {
            "name": "capabilities.yaml",
            "digest": {
              "sha256": "115e939a3a1109bb55b4776713c1b0ed0e7763a9065d914cff6cc8e9f8676978"
            }
          }
        ]
      }
    }
  },
  "artifacts": [
    {
      "name": "capabilities.yaml",
      "type": "CapabilityCatalog",
      "id": "CCC.BlocStor.CP",
      "role": "artifact"
    }
  ]
}

CCC Block Storage Capabilities

Capabilities for Block Storage technologies, as defined by the FINOS Common Cloud Controls project.

ID
CCC.BlocStor.CP
Version
v2026.07-rc
Gemara version
v1.2.0
Author
FINOS Common Cloud Controls

Data Resilience

The Data Resilience group covers entries related to ensuring data availability, integrity, and sovereignty across its lifecycle. This includes replication, backup, recovery, region restrictions, and protection against data loss or corruption.

  1. CCC.BlocStor.CP01 Block Volumes

    The service can provision block-level storage volumes that present as raw, unformatted block devices, allowing a user to create a file system or write data directly to the device.

Compute

The Compute group covers entries related to processing, execution, and runtime infrastructure. This includes CPU, memory, storage allocation, network ports, command-line interfaces, and elastic scaling.

  1. CCC.BlocStor.CP02 Volume Attachment

    The service can attach a block volume to a compute instance and detach it later, so that the same volume may be moved between instances over its lifecycle while persisting data independently of any one instance.

  2. CCC.BlocStor.CP03 Boot Volumes

    The service may be configured to serve a block volume as the bootable root device of a compute instance, persisting the operating system and its state across instance restarts.

Access Control

The Access Control group covers entries related to authentication, authorization, and trust perimeter enforcement. This includes multi-factor authentication, least privilege access, network access rules, and prevention of unauthorized access or reconnaissance.

  1. CCC.BlocStor.CP04 Multi-Attach Volumes

    The service may be configured to attach a single block volume to multiple compute instances simultaneously, enabling clustered or shared-access workloads that coordinate concurrent writes externally.

Resource Management

The Resource Management group covers entries related to the lifecycle, configuration, and operational integrity of cloud resources. This includes resource exhaustion, tag manipulation, version rollback, scaling, and cost management.

  1. CCC.BlocStor.CP05 Volume Resizing

    The service can increase the capacity of an existing block volume, often while it remains attached, so that storage can grow to meet demand without provisioning a new volume.

  2. CCC.BlocStor.CP06 Volume Types

    The service provides multiple volume types with differing performance and cost characteristics, such as solid-state and magnetic media, allowing a user to match a volume to the needs of a workload.

  3. CCC.BlocStor.CP07 Provisioned Performance

    The service may be configured to provision a target level of input/output operations per second (IOPS) and throughput for a block volume independently of its capacity, so that performance can be tuned to a workload.

Encryption

The Encryption group covers entries related to protecting data confidentiality and integrity through cryptographic mechanisms. This includes encryption in transit and at rest, key management, and certificate lifecycle management.

  1. CCC.BlocStor.CP08 Customer-Managed Encryption Keys

    The service may be configured to encrypt volume data at rest using customer-managed keys, allowing a user to control the key lifecycle and revoke access to stored data.