[2.0] Threatmodeling and Blueprints - #678

Open

stevespringett wants to merge 67 commits into

2.0-dev-threatmodeling

Commits on Jul 9, 2025

Initial commit
stevespringett
committed
9265fba

Commits on Jul 23, 2025

Added requirement prototype
stevespringett
committed
513ef74

Commits on Sep 3, 2025

Initial checkin of blueprint and threat model support
stevespringett
committed
83ce9d0

Commits on Oct 29, 2025

Adding threat models
steve.springett
committed
f4d10d4

Commits on Nov 11, 2025

Commits on Nov 23, 2025

Modified risk and model schemas
petra-dv
committed
7a04e95

Commits on Dec 5, 2025

Commits on Dec 7, 2025

adressed comments and reviewed further the schema
petra-dv
committed
e8f7aba
fixed naming inconsistency
petra-dv
committed
53cfdd1

Commits on Dec 10, 2025

Merge branch '2.0-dev-threatmodeling' into 2.0-dev-threat-modeling-petras-suggestions
stevespringett
authored
d999fac
Modified risk and model schemas (#732)
stevespringett
authored
d1ebee2
Fixed JSON issue
stevespringett
committed
c6e1657

Commits on Dec 15, 2025

Initial checkin of behavior model. Should satisfy goals outlined in #670. Blueprints working group will continue to iterate and validate.
stevespringett
committed
941fa1f

Commits on Jan 8, 2026

Extend cryptography-related behaviors
bhess
committed
96117b4

Commits on Jan 14, 2026

A few extensions to the crypto behaviors
bhess
committed
70de945

Commits on Jan 22, 2026

Commits on Mar 4, 2026

Commits on Mar 27, 2026

Commits on May 7, 2026

Added mockups
stevespringett
committed
54d16af

Commits on May 27, 2026

Major updates to threatmodeling and bluepring schemas and their related schemas. Supersedes and closes #777.
stevespringett
committed
21ca15a

Commits on Jun 5, 2026

WIP 2.0 threat-modeling schema set
stevespringett
committed
8a14716

Commits on Jun 6, 2026

Commits on Jun 7, 2026

Commits on Jun 8, 2026

Commits on Jun 11, 2026

Added control as first-class citizen and expanded use of controls to related areas in the spec.
stevespringett
committed
6ec41a6

Commits on Jun 16, 2026

Added test cases, comment to schema, and corrected space issue with behavior schema.
stevespringett
committed
72407e7

Commits on Jun 18, 2026

Changed risk type to align with the kind of risk assessment performed - and updated it to be an array. Added cadence (previously was risk assessment type) to be a noun representing temporal data. U…
stevespringett
committed
10d7dd2

Commits on Jun 19, 2026

Commits on Jun 28, 2026

Commits on Jul 12, 2026

Removed service in preparation for #733
stevespringett
committed
253d59c
chore: update bundled schemas [skip ci]
github-actions[bot]
committed
cf0bc55

Commits on Aug 9, 2026

Update schema/2.0/model/cyclonedx-risk-2.0.schema.json

stevespringett
and
jkowalleck
authored
d9718d6
chore: update bundled schemas [skip ci]
github-actions[bot]
committed
4109d01
Update schema/2.0/model/cyclonedx-control-2.0.schema.json

stevespringett
and
jkowalleck
authored
3ac3bea
chore: update bundled schemas [skip ci]
github-actions[bot]
committed
217916f
Update schema/behavior-taxonomy.schema.json

stevespringett
and
jkowalleck
authored
eeb8a3f
Update schema/2.0/model/cyclonedx-common-2.0.schema.json

stevespringett
and
jkowalleck
authored
40c5873
Update schema/2.0/model/cyclonedx-profile-2.0.schema.json

stevespringett
and
jkowalleck
authored
75bb5bd
chore: update bundled schemas [skip ci]
github-actions[bot]
committed
3e3282d
Update schema/2.0/model/cyclonedx-weakness-2.0.schema.json

stevespringett
and
jkowalleck
authored
b0e8640
chore: update bundled schemas [skip ci]
github-actions[bot]
committed
713d4fb
Update schema/2.0/model/cyclonedx-common-2.0.schema.json

stevespringett
and
jkowalleck
authored
3dcab8a
chore: update bundled schemas [skip ci]
github-actions[bot]
committed
906c579