FINOS-CCC/CCC.Message.TH Threat Catalog

FINOS-CCC/CCC.Message.TH

Threats for Messaging Services technologies, as defined by the FINOS Common Cloud Controls project.

Published by FINOS Common Cloud Controls

License Community-Spec-1.0

Install

OCI v1.1

$grcli unpack --repository finos-ccc/ccc.message.th --version v2026.07-rc

grcli unpack verifies this signature against the recorded identity below and fails closed before writing any files — no separate verify step needed. Pass --no-verify to skip.

Coordinate: oci.grc.store/finos-ccc/ccc.message.th:v2026.07-rc
Manifest digest: sha256:17cac694483b7e023c323963828a45b2f3aef3ea70139d0aeb94cf12182cb355
Signed by: no signature recorded

Identity recorded by this hub when the version was published; unpack (above) checks the signature against it.

Verify in CI — check the signature without downloading

$grcli verify --repository finos-ccc/ccc.message.th --version v2026.07-rc

Read-only: downloads nothing and exits non-zero if the signature or the recorded identity doesn't match — use it as an admission/policy gate.

Provenance

1 layer

Digest	Media type	Size
7dd9dc3aece7…	application/vnd.gemara.artifact.v1+yaml	1.9 KiB

Bundle config blob

{
  "bundle-version": "1.0",
  "gemara-version": "v1.2.0",
  "metadata": {
    "provenance": {
      "buildDefinition": {
        "buildType": "https://grc.store/grcli/buildtype/v0",
        "externalParameters": {
          "artifact": {
            "id": "CCC.Message.TH",
            "type": "ThreatCatalog"
          },
          "target": {
            "registry": "oci.grc.store",
            "repository": "finos-ccc/ccc.message.th",
            "tag": "v2026.07-rc"
          }
        },
        "internalParameters": {
          "CI": "true",
          "GITHUB_ACTIONS": "true",
          "GITHUB_ACTOR": "eddie-knight",
          "GITHUB_REF": "refs/heads/main",
          "GITHUB_REPOSITORY": "eddie-knight/common-cloud-controls",
          "GITHUB_RUN_ATTEMPT": "1",
          "GITHUB_RUN_ID": "28763687249",
          "GITHUB_SHA": "3e4a2c0ef4b966fcf7c8e2f0fd4f8da3f6ae02e1",
          "GITHUB_WORKFLOW": "Batch Release All Catalogs",
          "RUNNER_OS": "Linux"
        },
        "resolvedDependencies": [
          {
            "name": "artifacts/app-integration/message/threats.yaml",
            "uri": "file://artifacts/app-integration/message/threats.yaml",
            "digest": {
              "sha256": "7dd9dc3aece7f1168e1a7ca0c7807cfd7b60373636678c6faa1a85afa25f5468"
            }
          },
          {
            "name": "source",
            "uri": "git+https://github.com/eddie-knight/common-cloud-controls@3e4a2c0ef4b966fcf7c8e2f0fd4f8da3f6ae02e1",
            "digest": {
              "gitCommit": "3e4a2c0ef4b966fcf7c8e2f0fd4f8da3f6ae02e1"
            }
          }
        ]
      },
      "runDetails": {
        "builder": {
          "id": "https://github.com/eddie-knight/common-cloud-controls/actions/runs/28763687249",
          "version": {
            "go": "go1.25.0",
            "go-arch": "amd64",
            "go-os": "linux",
            "grcli": "v0.4.1"
          }
        },
        "metadata": {
          "invocationId": "28763687249-1",
          "startedOn": "2026-07-06T02:22:17.82941774Z",
          "finishedOn": "2026-07-06T02:22:18.30316147Z"
        },
        "byproducts": [
          {
            "name": "threats.yaml",
            "digest": {
              "sha256": "7dd9dc3aece7f1168e1a7ca0c7807cfd7b60373636678c6faa1a85afa25f5468"
            }
          }
        ]
      }
    }
  },
  "artifacts": [
    {
      "name": "threats.yaml",
      "type": "ThreatCatalog",
      "id": "CCC.Message.TH",
      "role": "artifact"
    }
  ]
}

CCC Messaging Services Threats

Threats for Messaging Services technologies, as defined by the FINOS Common Cloud Controls project.

ID: CCC.Message.TH
Version: v2026.07-rc
Gemara version: v1.2.0
Author: FINOS Common Cloud Controls

No threats in this group.