Repository navigation

[2.0] Threatmodeling and Blueprints - #678

Merged

stevespringett merged 67 commits into

2.0-devfrom

2.0-dev-threatmodeling

Aug 20, 2026

Merged

[2.0] Threatmodeling and Blueprints#678
stevespringett merged 67 commits into
2.0-devfrom
2.0-dev-threatmodeling

Commits on Jul 9, 2025
- Initial commit
  stevespringett
  committed
  9265fba
Commits on Jul 23, 2025
- Added requirement prototype
  stevespringett
  committed
  513ef74
Commits on Sep 3, 2025
- Initial checkin of blueprint and threat model support
  stevespringett
  committed
  83ce9d0
Commits on Oct 29, 2025
- Adding threat models
  steve.springett
  committed
  f4d10d4
Commits on Nov 11, 2025
- Merge remote-tracking branch 'origin/master' into 2.0-dev-threatmodeling
  stevespringett
  committed
  833bcc1
- Merge remote-tracking branch 'origin/2.0-dev' into 2.0-dev-threatmodeling
  stevespringett
  committed
  e124ae5
Commits on Nov 23, 2025
- Modified risk and model schemas
  petra-dv
  committed
  7a04e95
Commits on Dec 5, 2025
- Added .DS_Store to ignore
  stevespringett
  committed
  1bc014f
- Merge remote-tracking branch 'origin/2.0-dev' into 2.0-dev-threatmodeling
  stevespringett
  committed
  21b4d38
- Minor corrections to get bundle to compile.
  stevespringett
  committed
  83e8122
- chore: update bundled schemas [skip ci]
  github-actions[bot]
  committed
  f52760a
Commits on Dec 7, 2025
- adressed comments and reviewed further the schema
  petra-dv
  committed
  e8f7aba
- fixed naming inconsistency
  petra-dv
  committed
  53cfdd1
Commits on Dec 10, 2025
- Merge branch '2.0-dev-threatmodeling' into 2.0-dev-threat-modeling-petras-suggestions
  stevespringett
  authored
  d999fac
- Modified risk and model schemas (#732)
  stevespringett
  authored
  d1ebee2
- Fixed JSON issue
  stevespringett
  committed
  c6e1657
Commits on Dec 15, 2025
- Initial checkin of behavior model. Should satisfy goals outlined in #670. Blueprints working group will continue to iterate and validate.
  stevespringett
  committed
  941fa1f
Commits on Jan 8, 2026
- Extend cryptography-related behaviors
  bhess
  committed
  96117b4
Commits on Jan 14, 2026
- A few extensions to the crypto behaviors
  bhess
  committed
  70de945
Commits on Jan 22, 2026
- Makes sure meta:enum descrptions are available for the new behaviors. Orders new entries alphabetically in the enum
  bhess
  committed
  bb7e30e
- Extend cryptography-related behaviors (#772)
  stevespringett
  authored
  20ee286
Commits on Mar 4, 2026
- Major changes to blueprints and other changes to supporting schemas. This currently compiles.
  stevespringett
  committed
  fd3b448
- chore: update bundled schemas [skip ci]
  github-actions[bot]
  committed
  e4cd7d6
Commits on Mar 27, 2026
Commits on May 7, 2026
- Added mockups
  stevespringett
  committed
  54d16af
Commits on May 27, 2026
- Major updates to threatmodeling and bluepring schemas and their related schemas. Supersedes and closes #777.
  stevespringett
  committed
  21ca15a
Commits on Jun 5, 2026
- WIP 2.0 threat-modeling schema set
  stevespringett
  committed
  8a14716
Commits on Jun 6, 2026
Commits on Jun 7, 2026
Commits on Jun 8, 2026
- Added session management and a few other minor changes
  stevespringett
  committed
  43e8455
- Added qualitative-matrix
  stevespringett
  committed
  6735876
- Added threat origin
  stevespringett
  committed
  f011423
- 2.0 dev threatmodeling staging (#951)
  stevespringett
  authored
  cc44d4b
Commits on Jun 11, 2026
- Added control as first-class citizen and expanded use of controls to related areas in the spec.
  stevespringett
  committed
  6ec41a6
Commits on Jun 16, 2026
- Added test cases, comment to schema, and corrected space issue with behavior schema.
  stevespringett
  committed
  72407e7
Commits on Jun 18, 2026
- Changed risk type to align with the kind of risk assessment performed - and updated it to be an array. Added cadence (previously was risk assessment type) to be a noun representing temporal data. U…
  stevespringett
  committed
  10d7dd2
Commits on Jun 19, 2026
- Closed some gaps for PASTA, STRIDE-LM by introducing business objectives, kill chains, and attack paths for lateral movement.
  stevespringett
  committed
  84e4513
- Updated test case
  stevespringett
  committed
  6f90077
Commits on Jun 28, 2026
- Merge remote-tracking branch 'origin/2.0-dev' into 2.0-dev-threatmodeling
  stevespringett
  committed
  e0c1a32
- chore: update bundled schemas [skip ci]
  github-actions[bot]
  committed
  03a8eaa
Commits on Jul 12, 2026
- Removed service in preparation for #733
  stevespringett
  committed
  253d59c
- chore: update bundled schemas [skip ci]
  github-actions[bot]
  committed
  cf0bc55
Commits on Aug 9, 2026
- Update schema/2.0/model/cyclonedx-risk-2.0.schema.json
  
  stevespringett
  and
  jkowalleck
  authored
  d9718d6
- chore: update bundled schemas [skip ci]
  github-actions[bot]
  committed
  4109d01
- Update schema/2.0/model/cyclonedx-control-2.0.schema.json
  
  stevespringett
  and
  jkowalleck
  authored
  3ac3bea
- chore: update bundled schemas [skip ci]
  github-actions[bot]
  committed
  217916f
- Update schema/behavior-taxonomy.schema.json
  
  stevespringett
  and
  jkowalleck
  authored
  eeb8a3f
- Update schema/2.0/model/cyclonedx-common-2.0.schema.json
  
  stevespringett
  and
  jkowalleck
  authored
  40c5873
- Update schema/2.0/model/cyclonedx-profile-2.0.schema.json
  
  stevespringett
  and
  jkowalleck
  authored
  75bb5bd
- chore: update bundled schemas [skip ci]
  github-actions[bot]
  committed
  3e3282d
- Update schema/2.0/model/cyclonedx-weakness-2.0.schema.json
  
  stevespringett
  and
  jkowalleck
  authored
  b0e8640
- chore: update bundled schemas [skip ci]
  github-actions[bot]
  committed
  713d4fb
- Update schema/2.0/model/cyclonedx-common-2.0.schema.json
  
  stevespringett
  and
  jkowalleck
  authored
  3dcab8a
- chore: update bundled schemas [skip ci]
  github-actions[bot]
  committed
  906c579

Commits

Commits on Jul 9, 2025

Commits on Jul 23, 2025

Commits on Sep 3, 2025

Commits on Oct 29, 2025

Commits on Nov 11, 2025

Commits on Nov 23, 2025

Commits on Dec 5, 2025

Commits on Dec 7, 2025

Commits on Dec 10, 2025

Commits on Dec 15, 2025

Commits on Jan 8, 2026

Commits on Jan 14, 2026

Commits on Jan 22, 2026

Commits on Mar 4, 2026

Commits on Mar 27, 2026

Commits on May 7, 2026

Commits on May 27, 2026

Commits on Jun 5, 2026

Commits on Jun 6, 2026

Commits on Jun 7, 2026

Commits on Jun 8, 2026

Commits on Jun 11, 2026

Commits on Jun 16, 2026

Commits on Jun 18, 2026

Commits on Jun 19, 2026

Commits on Jun 28, 2026

Commits on Jul 12, 2026

Commits on Aug 9, 2026