-
Found in `project/ThreatModelingTools.md` for each tool we need the following:
- Status : is it being actively developed (i.e. contributions in the last year), is it stale (i.e. no contributions in t…
-
### Feature Spec
I'd love to export an image of the architecture (as seen in the console) from the CLI.
It helps with maintaining knowledge of the app (like cloudcraft or leanix) and security (threa…
-
Hi!
First of all, thank you for the really cool tool!
I would like to use likec4 model not only for diagrams but also in other scenarios:
- build new artifacts based on this model (lists of com…
-
We should have a document describing the intended threat model that liboqs aims to be secure against. This would include issues such as constant time behaviour, and what is in or out of scope, such as…
-
### What is this about?
We need to prioritize the removal of extra MV3 builds from our pipeline. This task involves identifying and removing these builds to streamline our build process.
All the…
-
Per incident: [CCS Wallet Incident](https://github.com/monero-project/meta/issues/916)
After the disclosure of the stolen funds there has been a lot of questions of what exactly happened and how a…
-
Managers who oversee software developers also need education!
First, they need "why it matters" - including past $ fines, big events, etc.
They also need to know *what* software developers need …
-
In relation to:
https://github.com/OWASP/ASVS/issues/877 and https://github.com/OWASP/ASVS/issues/1031
I think all of v1 needs to stick with threat modeling and general architecture requirements…
-
start with java web application by analyzing web.xml, bundled jars, etc.
-
### Current Behavior
Dependency-Track supports Service BOMs. From the CycloneDX website:
>SaaSBOMs compliment Infrastructure-as-Code (IaC) by providing a logical representation of a complex syste…