FINOS-CCC/CCC.Message.TH Threat Catalog

FINOS-CCC/CCC.Message.TH

Threats for Messaging Services technologies, as defined by the FINOS Common Cloud Controls project.

Published by FINOS Common Cloud Controls

License No license declared

Install

OCI v1.1

$grcli unpack --repository finos-ccc/ccc.message.th --version v2026.06-rc7

grcli unpack verifies this signature against the recorded identity below and fails closed before writing any files — no separate verify step needed. Pass --no-verify to skip.

Coordinate: oci.grc.store/finos-ccc/ccc.message.th:v2026.06-rc7
Manifest digest: sha256:69f30a204aef8a4f20409dbe8fdcbff9693e9fb1a95185de669a9c643d49d780
Signed by: no signature recorded

Identity recorded by this hub when the version was published; unpack (above) checks the signature against it.

Verify in CI — check the signature without downloading

$grcli verify --repository finos-ccc/ccc.message.th --version v2026.06-rc7

Read-only: downloads nothing and exits non-zero if the signature or the recorded identity doesn't match — use it as an admission/policy gate.

Provenance

1 layer

Digest	Media type	Size
8671793b4b55…	application/vnd.gemara.artifact.v1+yaml	1.9 KiB

Bundle config blob

{
  "bundle-version": "1.0",
  "gemara-version": "v1.2.0",
  "metadata": {
    "provenance": {
      "buildDefinition": {
        "buildType": "https://grc.store/grcli/buildtype/v0",
        "externalParameters": {
          "artifact": {
            "id": "CCC.Message.TH",
            "type": "ThreatCatalog"
          },
          "target": {
            "registry": "oci.grc.store",
            "repository": "finos-ccc/ccc.message.th",
            "tag": "v2026.06-rc7"
          }
        },
        "internalParameters": {
          "CI": "true",
          "GITHUB_ACTIONS": "true",
          "GITHUB_ACTOR": "eddie-knight",
          "GITHUB_REF": "refs/heads/main",
          "GITHUB_REPOSITORY": "eddie-knight/common-cloud-controls",
          "GITHUB_RUN_ATTEMPT": "1",
          "GITHUB_RUN_ID": "27954594689",
          "GITHUB_SHA": "0bc30fa63bc66fb31a65081cf6ce8aea9182bb08",
          "GITHUB_WORKFLOW": "Batch Release All Catalogs",
          "RUNNER_OS": "Linux"
        },
        "resolvedDependencies": [
          {
            "name": "artifacts/app-integration/message/threats.yaml",
            "uri": "file://artifacts/app-integration/message/threats.yaml",
            "digest": {
              "sha256": "8671793b4b556e48a97ed2a8e89b70b7868b6c006f9e1c17b953181f81817816"
            }
          },
          {
            "name": "source",
            "uri": "git+https://github.com/eddie-knight/common-cloud-controls@0bc30fa63bc66fb31a65081cf6ce8aea9182bb08",
            "digest": {
              "gitCommit": "0bc30fa63bc66fb31a65081cf6ce8aea9182bb08"
            }
          }
        ]
      },
      "runDetails": {
        "builder": {
          "id": "https://github.com/eddie-knight/common-cloud-controls/actions/runs/27954594689",
          "version": {
            "go": "go1.25.0",
            "go-arch": "amd64",
            "go-os": "linux",
            "grcli": "v0.2.2"
          }
        },
        "metadata": {
          "invocationId": "27954594689-1",
          "startedOn": "2026-06-22T13:03:00.222171611Z",
          "finishedOn": "2026-06-22T13:03:00.469777639Z"
        },
        "byproducts": [
          {
            "name": "threats.yaml",
            "digest": {
              "sha256": "8671793b4b556e48a97ed2a8e89b70b7868b6c006f9e1c17b953181f81817816"
            }
          }
        ]
      }
    }
  },
  "artifacts": [
    {
      "name": "threats.yaml",
      "type": "ThreatCatalog",
      "id": "CCC.Message.TH",
      "role": "artifact"
    }
  ]
}

CCC Messaging Services Threats

Threats for Messaging Services technologies, as defined by the FINOS Common Cloud Controls project.

ID: CCC.Message.TH
Version: v2026.06-rc7
Gemara version: v1.2.0
Author: FINOS Common Cloud Controls

No threats in this group.