FINOS-CCC/CCC.SecMgmt.TH Threat Catalog

FINOS-CCC/CCC.SecMgmt.TH

Threats for Secret Management technologies, as defined by the FINOS Common Cloud Controls project.

Published by FINOS Common Cloud Controls

License Community-Spec-1.0

Install

OCI v1.1

$grcli unpack --repository finos-ccc/ccc.secmgmt.th --version v2026.07-rc

grcli unpack verifies this signature against the recorded identity below and fails closed before writing any files — no separate verify step needed. Pass --no-verify to skip.

Coordinate: oci.grc.store/finos-ccc/ccc.secmgmt.th:v2026.07-rc
Manifest digest: sha256:fea452a52f2e1701420af80a0ee2173839b13f82a2a7cbaa2a633badbbc8116f
Signed by: no signature recorded

Identity recorded by this hub when the version was published; unpack (above) checks the signature against it.

Verify in CI — check the signature without downloading

$grcli verify --repository finos-ccc/ccc.secmgmt.th --version v2026.07-rc

Read-only: downloads nothing and exits non-zero if the signature or the recorded identity doesn't match — use it as an admission/policy gate.

Provenance

1 layer

Digest	Media type	Size
700225d761ba…	application/vnd.gemara.artifact.v1+yaml	1.7 KiB

Bundle config blob

{
  "bundle-version": "1.0",
  "gemara-version": "v1.2.0",
  "metadata": {
    "provenance": {
      "buildDefinition": {
        "buildType": "https://grc.store/grcli/buildtype/v0",
        "externalParameters": {
          "artifact": {
            "id": "CCC.SecMgmt.TH",
            "type": "ThreatCatalog"
          },
          "target": {
            "registry": "oci.grc.store",
            "repository": "finos-ccc/ccc.secmgmt.th",
            "tag": "v2026.07-rc"
          }
        },
        "internalParameters": {
          "CI": "true",
          "GITHUB_ACTIONS": "true",
          "GITHUB_ACTOR": "eddie-knight",
          "GITHUB_REF": "refs/heads/main",
          "GITHUB_REPOSITORY": "eddie-knight/common-cloud-controls",
          "GITHUB_RUN_ATTEMPT": "1",
          "GITHUB_RUN_ID": "28763687249",
          "GITHUB_SHA": "3e4a2c0ef4b966fcf7c8e2f0fd4f8da3f6ae02e1",
          "GITHUB_WORKFLOW": "Batch Release All Catalogs",
          "RUNNER_OS": "Linux"
        },
        "resolvedDependencies": [
          {
            "name": "artifacts/crypto/secrets/threats.yaml",
            "uri": "file://artifacts/crypto/secrets/threats.yaml",
            "digest": {
              "sha256": "700225d761ba4d1ee05b4f15434e7ab2e04ad267e1ee3613bbc3c0e45abad936"
            }
          },
          {
            "name": "source",
            "uri": "git+https://github.com/eddie-knight/common-cloud-controls@3e4a2c0ef4b966fcf7c8e2f0fd4f8da3f6ae02e1",
            "digest": {
              "gitCommit": "3e4a2c0ef4b966fcf7c8e2f0fd4f8da3f6ae02e1"
            }
          }
        ]
      },
      "runDetails": {
        "builder": {
          "id": "https://github.com/eddie-knight/common-cloud-controls/actions/runs/28763687249",
          "version": {
            "go": "go1.25.0",
            "go-arch": "amd64",
            "go-os": "linux",
            "grcli": "v0.4.1"
          }
        },
        "metadata": {
          "invocationId": "28763687249-1",
          "startedOn": "2026-07-06T02:23:42.269387993Z",
          "finishedOn": "2026-07-06T02:23:42.750811249Z"
        },
        "byproducts": [
          {
            "name": "threats.yaml",
            "digest": {
              "sha256": "700225d761ba4d1ee05b4f15434e7ab2e04ad267e1ee3613bbc3c0e45abad936"
            }
          }
        ]
      }
    }
  },
  "artifacts": [
    {
      "name": "threats.yaml",
      "type": "ThreatCatalog",
      "id": "CCC.SecMgmt.TH",
      "role": "artifact"
    }
  ]
}

CCC Secret Management Threats

Threats for Secret Management technologies, as defined by the FINOS Common Cloud Controls project.

ID: CCC.SecMgmt.TH
Version: v2026.07-rc
Gemara version: v1.2.0
Author: FINOS Common Cloud Controls

No threats in this group.