CCC Container Registry Threats
Threats for Container Registry technologies, as defined by the FINOS Common Cloud Controls project.
- ID
- CCC.CntrReg.TH
- Version
- v2026.06-rc4
- Gemara version
- v1.2.0
- Author
- FINOS Common Cloud Controls
Resource Management
The Resource Management group covers entries related to the lifecycle, configuration, and operational integrity of cloud resources. This includes resource exhaustion, tag manipulation, version rollback, scaling, and cost management.
CCC.CntrReg.TH01 Vulnerabilities in Artifacts are Exploited
Attackers exploit known vulnerabilities in container images or artifacts stored in the registry, leading to unauthorized access, data breaches, or system compromise.
Capabilities
- CCC.CntrReg.Capabilities
- CCC.CntrReg.CP05
- CCC.CntrReg.Capabilities
CCC.CntrReg.TH02 Accumulation of Unused Artifacts
The registry accumulates outdated or unused artifacts, increasing storage costs and the risk of deploying vulnerable or untested versions.
Capabilities
- CCC.CntrReg.Capabilities
- CCC.CntrReg.CP04
- CCC.Core.Capabilities
- CCC.Core.CP18
- CCC.CntrReg.Capabilities