FINOS-CCC/CCC.SvlsComp.TH Threat Catalog

FINOS-CCC/CCC.SvlsComp.TH

Threats for Serverless Computing technologies, as defined by the FINOS Common Cloud Controls project.

Published by FINOS Common Cloud Controls

License No license declared

Install

OCI v1.1

$grcli unpack --repository finos-ccc/ccc.svlscomp.th --version v2026.06-rc7

grcli unpack verifies this signature against the recorded identity below and fails closed before writing any files — no separate verify step needed. Pass --no-verify to skip.

Coordinate: oci.grc.store/finos-ccc/ccc.svlscomp.th:v2026.06-rc7
Manifest digest: sha256:403f2bf77bebb170d39241e5b71d521c67171fbda6ced16e2659eab755d01df1
Signed by: no signature recorded

Identity recorded by this hub when the version was published; unpack (above) checks the signature against it.

Verify in CI — check the signature without downloading

$grcli verify --repository finos-ccc/ccc.svlscomp.th --version v2026.06-rc7

Read-only: downloads nothing and exits non-zero if the signature or the recorded identity doesn't match — use it as an admission/policy gate.

Provenance

1 layer

Digest	Media type	Size
eba304a11faf…	application/vnd.gemara.artifact.v1+yaml	1.9 KiB

Bundle config blob

{
  "bundle-version": "1.0",
  "gemara-version": "v1.2.0",
  "metadata": {
    "provenance": {
      "buildDefinition": {
        "buildType": "https://grc.store/grcli/buildtype/v0",
        "externalParameters": {
          "artifact": {
            "id": "CCC.SvlsComp.TH",
            "type": "ThreatCatalog"
          },
          "target": {
            "registry": "oci.grc.store",
            "repository": "finos-ccc/ccc.svlscomp.th",
            "tag": "v2026.06-rc7"
          }
        },
        "internalParameters": {
          "CI": "true",
          "GITHUB_ACTIONS": "true",
          "GITHUB_ACTOR": "eddie-knight",
          "GITHUB_REF": "refs/heads/main",
          "GITHUB_REPOSITORY": "eddie-knight/common-cloud-controls",
          "GITHUB_RUN_ATTEMPT": "1",
          "GITHUB_RUN_ID": "27954594689",
          "GITHUB_SHA": "0bc30fa63bc66fb31a65081cf6ce8aea9182bb08",
          "GITHUB_WORKFLOW": "Batch Release All Catalogs",
          "RUNNER_OS": "Linux"
        },
        "resolvedDependencies": [
          {
            "name": "artifacts/compute/serverless-computing/threats.yaml",
            "uri": "file://artifacts/compute/serverless-computing/threats.yaml",
            "digest": {
              "sha256": "eba304a11fafeccd584e771b7fa084115ed0048d5a2148158c4b006f7f12af3f"
            }
          },
          {
            "name": "source",
            "uri": "git+https://github.com/eddie-knight/common-cloud-controls@0bc30fa63bc66fb31a65081cf6ce8aea9182bb08",
            "digest": {
              "gitCommit": "0bc30fa63bc66fb31a65081cf6ce8aea9182bb08"
            }
          }
        ]
      },
      "runDetails": {
        "builder": {
          "id": "https://github.com/eddie-knight/common-cloud-controls/actions/runs/27954594689",
          "version": {
            "go": "go1.25.0",
            "go-arch": "amd64",
            "go-os": "linux",
            "grcli": "v0.2.2"
          }
        },
        "metadata": {
          "invocationId": "27954594689-1",
          "startedOn": "2026-06-22T13:03:20.572280248Z",
          "finishedOn": "2026-06-22T13:03:20.817654179Z"
        },
        "byproducts": [
          {
            "name": "threats.yaml",
            "digest": {
              "sha256": "eba304a11fafeccd584e771b7fa084115ed0048d5a2148158c4b006f7f12af3f"
            }
          }
        ]
      }
    }
  },
  "artifacts": [
    {
      "name": "threats.yaml",
      "type": "ThreatCatalog",
      "id": "CCC.SvlsComp.TH",
      "role": "artifact"
    }
  ]
}

CCC Serverless Computing Threats

Threats for Serverless Computing technologies, as defined by the FINOS Common Cloud Controls project.

ID: CCC.SvlsComp.TH
Version: v2026.06-rc7
Gemara version: v1.2.0
Author: FINOS Common Cloud Controls

No threats in this group.