GRC Store

Search / finos-ccc/ccc.build.cp / v2026.06-rc5

Release · v2026.06-rc5

FINOS-CCC/CCC.Build.CP Capability Catalog

FINOS-CCC/CCC.Build.CP

Capabilities for Build technologies, as defined by the FINOS Common Cloud Controls project.

Published by FINOS Common Cloud Controls

Install

OCI v1.1
$grcli unpack --repository finos-ccc/ccc.build.cp --tag v2026.06-rc5
Coordinate
oci.grc.store/finos-ccc/ccc.build.cp:v2026.06-rc5
Manifest digest
sha256:3c0fab8d62cc03cc57d0b3c5bfab5a4b309857eb082c6e82d25f7dcc7b3683e8

Provenance

1 layer
Digest Media type Size
49869788959e… application/vnd.gemara.artifact.v1+yaml 4.9 KiB
Bundle config blob 
{
  "bundle-version": "1.0",
  "gemara-version": "v1.2.0",
  "metadata": {
    "provenance": {
      "buildDefinition": {
        "buildType": "https://grc.store/grcli/buildtype/v0",
        "externalParameters": {
          "artifact": {
            "id": "CCC.Build.CP",
            "type": "CapabilityCatalog"
          },
          "target": {
            "registry": "oci.grc.store",
            "repository": "finos-ccc/ccc.build.cp",
            "tag": "v2026.06-rc5"
          }
        },
        "internalParameters": {
          "CI": "true",
          "GITHUB_ACTIONS": "true",
          "GITHUB_ACTOR": "eddie-knight",
          "GITHUB_REF": "refs/heads/main",
          "GITHUB_REPOSITORY": "eddie-knight/common-cloud-controls",
          "GITHUB_RUN_ATTEMPT": "1",
          "GITHUB_RUN_ID": "26771723499",
          "GITHUB_SHA": "a9503345caf59a144d8ab9b4bede212b393ca56a",
          "GITHUB_WORKFLOW": "Batch Release All Catalogs",
          "RUNNER_OS": "Linux"
        },
        "resolvedDependencies": [
          {
            "name": "artifacts/devtools/build/capabilities.yaml",
            "uri": "file://artifacts/devtools/build/capabilities.yaml",
            "digest": {
              "sha256": "49869788959e52b4366bb36a2ee4fc90beaf599e423546cea2dfbd37eafeb569"
            }
          },
          {
            "name": "source",
            "uri": "git+https://github.com/eddie-knight/common-cloud-controls@a9503345caf59a144d8ab9b4bede212b393ca56a",
            "digest": {
              "gitCommit": "a9503345caf59a144d8ab9b4bede212b393ca56a"
            }
          }
        ]
      },
      "runDetails": {
        "builder": {
          "id": "https://github.com/eddie-knight/common-cloud-controls/actions/runs/26771723499",
          "version": {
            "go": "go1.25.0",
            "go-arch": "amd64",
            "go-os": "linux",
            "grcli": "v0.2.2"
          }
        },
        "metadata": {
          "invocationId": "26771723499-1",
          "startedOn": "2026-06-01T17:47:41.791778106Z",
          "finishedOn": "2026-06-01T17:47:41.901693604Z"
        },
        "byproducts": [
          {
            "name": "capabilities.yaml",
            "digest": {
              "sha256": "49869788959e52b4366bb36a2ee4fc90beaf599e423546cea2dfbd37eafeb569"
            }
          }
        ]
      }
    }
  },
  "artifacts": [
    {
      "name": "capabilities.yaml",
      "type": "CapabilityCatalog",
      "id": "CCC.Build.CP",
      "role": "artifact"
    }
  ]
}

CCC Build Capabilities

Capabilities for Build technologies, as defined by the FINOS Common Cloud Controls project.

ID
CCC.Build.CP
Version
v2026.06-rc5
Gemara version
v1.2.0
Author
FINOS Common Cloud Controls

Orchestration

The Orchestration group covers entries related to coordinating and managing workloads across distributed systems. This includes container orchestration, job scheduling, CI/CD pipelines, build automation, and service mesh management.

  1. CCC.Build.CP01 Build Automation

    Provides fully managed continuous integration service that compiles source code, run tests and produce software packages based on triggers or schedules.

  2. CCC.Build.CP02 CI/CD Pipelines

    Provides or integrates with continuous integration and continuous delivery/deployment (CI/CD) services.

  3. CCC.Build.CP03 Source Repository Integration

    Integrates with cloud native or external source code repositories such as GitHub, Bitbucket, GitLab to trigger builds on code changes.

  4. CCC.Build.CP05 Multi-language Support

    Provides pre-configured build environments for popular programming languages such as Java, Python, Node.js, .NET, etc.

  5. CCC.Build.CP06 Custom Build Environments

    Allows custom build environments by specifying the operating system, runtime, or providing a custom docker runtime image.

  6. CCC.Build.CP07 Build Docker Image

    Support for building docker container images in the pipelines.

  7. CCC.Build.CP08 Environment Variables

    Ability to set environment variables within the build project.

  8. CCC.Build.CP09 Concurrent Builds

    Support for concurrent, parallel builds to improve build performance.

  9. CCC.Build.CP10 Caching

    Caching of dependencies between builds for faster builds.

Data Resilience

The Data Resilience group covers entries related to ensuring data availability, integrity, and sovereignty across its lifecycle. This includes replication, backup, recovery, region restrictions, and protection against data loss or corruption.

  1. CCC.Build.CP04 Artifact Storage

    Ability to securely store build artifacts for later use.

Observability

The Observability group covers entries related to logging, monitoring, metrics, alerting, and event publication. This includes audit trail integrity, enumeration detection, and protection against tampering or unauthorized access to operational telemetry.

  1. CCC.Build.CP11 Realtime Build Logs

    Providing the ability to monitor builds and view logs in the real-time.

  2. CCC.Build.CP12 List and View Builds

    Ability to list, view logs and download artifacts of old builds.