Skip to main content

Devtools / Build

CCC Build Threats

Version: DEV

IDTitleDescriptionExternal MappingsCapability MappingsControl Mappings
CCC.Build.TH01Unauthorized Build ExecutionAttackers may trigger builds using unauthorized build agents or external services, leading to unauthorized code execution or deployment of malicious code.110
CCC.Build.TH02External Exposure of Build EnvironmentsIf build environments have external network access, they may be accessed by unauthorized parties, leading to data exfiltration or tampering.110

Imports

IDRemarks
CCC.Core.TH01Access is Granted to Unauthorized Users
CCC.Core.TH02Data is Intercepted in Transit
CCC.Core.TH03Deployment Region Network is Untrusted
CCC.Core.TH04Data is Replicated to Untrusted or External Locations
CCC.Core.TH05Interference with Replication Processes
CCC.Core.TH06Data is Lost or Corrupted
CCC.Core.TH07Logs are Tampered With or Deleted
CCC.Core.TH09Runtime Logs are Read by Unauthorized Entities
CCC.Core.TH11Publications are Incorrectly Triggered
CCC.Core.TH12Resource Constraints are Exhausted
CCC.Core.TH14Older Resource Versions are Used
CCC.Core.TH15Automated Enumeration and Reconnaissance by Non-human Entities
CCC.Core.TH16Publications are Disabled