FINOS-CCC/CCC.SecMgmt.TH Threat Catalog

FINOS-CCC/CCC.SecMgmt.TH

Threats for Secret Management technologies, as defined by the FINOS Common Cloud Controls project.

Published by FINOS Common Cloud Controls

License No license declared

Install

OCI v1.1

$grcli unpack --repository finos-ccc/ccc.secmgmt.th --version v2026.06-rc3

grcli unpack verifies this signature against the recorded identity below and fails closed before writing any files — no separate verify step needed. Pass --no-verify to skip.

Coordinate: oci.grc.store/finos-ccc/ccc.secmgmt.th:v2026.06-rc3
Manifest digest: sha256:44afffb1771b3c38ab9ce79e9d3a30d416d2dd1b69032138d13ab85bb72d2083
Signed by: no signature recorded

Identity recorded by this hub when the version was published; unpack (above) checks the signature against it.

Verify in CI — check the signature without downloading

$grcli verify --repository finos-ccc/ccc.secmgmt.th --version v2026.06-rc3

Read-only: downloads nothing and exits non-zero if the signature or the recorded identity doesn't match — use it as an admission/policy gate.

Provenance

1 layer

Digest	Media type	Size
f58addc109b0…	application/vnd.gemara.artifact.v1+yaml	1.7 KiB

Bundle config blob

{
  "bundle-version": "1.0",
  "gemara-version": "v1.2.0",
  "metadata": {
    "provenance": {
      "buildDefinition": {
        "buildType": "https://grc.store/grcli/buildtype/v0",
        "externalParameters": {
          "artifact": {
            "id": "CCC.SecMgmt.TH",
            "type": "ThreatCatalog"
          },
          "target": {
            "registry": "oci.grc.store",
            "repository": "finos-ccc/ccc.secmgmt.th",
            "tag": "v2026.06-rc3"
          }
        },
        "internalParameters": {
          "CI": "true",
          "GITHUB_ACTIONS": "true",
          "GITHUB_ACTOR": "eddie-knight",
          "GITHUB_REF": "refs/heads/main",
          "GITHUB_REPOSITORY": "eddie-knight/common-cloud-controls",
          "GITHUB_RUN_ATTEMPT": "1",
          "GITHUB_RUN_ID": "27954012399",
          "GITHUB_SHA": "0bc30fa63bc66fb31a65081cf6ce8aea9182bb08",
          "GITHUB_WORKFLOW": "Batch Release All Catalogs",
          "RUNNER_OS": "Linux"
        },
        "resolvedDependencies": [
          {
            "name": "artifacts/crypto/secrets/threats.yaml",
            "uri": "file://artifacts/crypto/secrets/threats.yaml",
            "digest": {
              "sha256": "f58addc109b0aa3b6872f4b9f43e5ef38bc41972f28e2f62ab9a199afa3220d2"
            }
          },
          {
            "name": "source",
            "uri": "git+https://github.com/eddie-knight/common-cloud-controls@0bc30fa63bc66fb31a65081cf6ce8aea9182bb08",
            "digest": {
              "gitCommit": "0bc30fa63bc66fb31a65081cf6ce8aea9182bb08"
            }
          }
        ]
      },
      "runDetails": {
        "builder": {
          "id": "https://github.com/eddie-knight/common-cloud-controls/actions/runs/27954012399",
          "version": {
            "go": "go1.25.0",
            "go-arch": "amd64",
            "go-os": "linux",
            "grcli": "v0.2.2"
          }
        },
        "metadata": {
          "invocationId": "27954012399-1",
          "startedOn": "2026-06-22T12:53:33.662644057Z",
          "finishedOn": "2026-06-22T12:53:34.097406264Z"
        },
        "byproducts": [
          {
            "name": "threats.yaml",
            "digest": {
              "sha256": "f58addc109b0aa3b6872f4b9f43e5ef38bc41972f28e2f62ab9a199afa3220d2"
            }
          }
        ]
      }
    }
  },
  "artifacts": [
    {
      "name": "threats.yaml",
      "type": "ThreatCatalog",
      "id": "CCC.SecMgmt.TH",
      "role": "artifact"
    }
  ]
}

CCC Secret Management Threats

Threats for Secret Management technologies, as defined by the FINOS Common Cloud Controls project.

ID: CCC.SecMgmt.TH
Version: v2026.06-rc3
Gemara version: v1.2.0
Author: FINOS Common Cloud Controls

No threats in this group.