threatcl を Homebrew でインストール

プロジェクトリンク

• ホームページ

コマンドとエイリアス

• threatcl

プロジェクトの歴史

The project frames threat modeling as a DevOps and version-control workflow: its README argues for a simple text-file format, a CLI-driven user experience, and integration with VCS. It builds on HashiCorp Configuration Language and the README explicitly connects that choice to Terraform familiarity and machine-readable structure.

採用の歴史

The official documentation positions threatcl for several installation and automation paths: Homebrew, Go install, Docker, and GitHub Actions. The README also documents release provenance through SLSA and GitHub attestations, which fits the security-tooling audience that may want to verify downloaded binaries and container images.

使われ方

Users write threat models in HCL, then use the CLI to validate, list, view, export, query, generate dashboards, render data-flow diagrams, parse Terraform output, or run a server. The optional `config.hcl` file can override default classifications, impact types, STRIDE elements, and dependency classifications.

パッケージ好きにとっての重要性

For package nerds, threatcl is notable because it turns a security documentation practice into a normal source-controlled artifact with a CLI, Homebrew install, container image, GitHub Action, release attestations, and HCL syntax familiar to infrastructure engineers.

タイムライン

• Project README: hcltm is renamed to threatcl.
• Current README: documents Homebrew, Docker, GitHub Actions, SLSA attestations, HCL threat models, GraphQL queries, Terraform parsing, and optional config.hcl.
• Current docs site: documents Homebrew, Go, Docker, and GitHub Actions getting-started flows.

Related projects

• Related projects and specifications include Terraform and HCL2, OWASP threat-modeling material, OpenThreatModel, go-dfd, GitHub Actions automation, and security-as-code workflows.

ソース

• https://github.com/threatcl/threatcl#readme - official README for rename from hcltm, goals, HCL basis, CLI commands, Homebrew install, release provenance, and config.hcl.
• https://threatcl.dev/ - official documentation site for getting started, Homebrew/Go/Docker/GitHub Actions installs, and example threat model.