| ID | Title | Description | External Mappings | Capability Mappings | Control Mappings |
|---|---|---|---|---|---|
| CCC.Build.TH01 | Unauthorized Build Execution | Attackers may trigger builds using unauthorized build agents or external services, leading to unauthorized code execution or deployment of malicious code. | 1 | 1 | 0 |
| CCC.Build.TH02 | External Exposure of Build Environments | If build environments have external network access, they may be accessed by unauthorized parties, leading to data exfiltration or tampering. | 1 | 1 | 0 |
Imports
| ID | Remarks |
|---|---|
| CCC.Core.TH01 | Access is Granted to Unauthorized Users |
| CCC.Core.TH02 | Data is Intercepted in Transit |
| CCC.Core.TH03 | Deployment Region Network is Untrusted |
| CCC.Core.TH04 | Data is Replicated to Untrusted or External Locations |
| CCC.Core.TH05 | Interference with Replication Processes |
| CCC.Core.TH06 | Data is Lost or Corrupted |
| CCC.Core.TH07 | Logs are Tampered With or Deleted |
| CCC.Core.TH09 | Runtime Logs are Read by Unauthorized Entities |
| CCC.Core.TH11 | Publications are Incorrectly Triggered |
| CCC.Core.TH12 | Resource Constraints are Exhausted |
| CCC.Core.TH14 | Older Resource Versions are Used |
| CCC.Core.TH15 | Automated Enumeration and Reconnaissance by Non-human Entities |
| CCC.Core.TH16 | Publications are Disabled |