Install threatcl with Homebrew

Project links

• Homepage

Commands and aliases

• threatcl

Project history

The project frames threat modeling as a DevOps and version-control workflow: its README argues for a simple text-file format, a CLI-driven user experience, and integration with VCS. It builds on HashiCorp Configuration Language and the README explicitly connects that choice to Terraform familiarity and machine-readable structure.

Adoption history

The official documentation positions threatcl for several installation and automation paths: Homebrew, Go install, Docker, and GitHub Actions. The README also documents release provenance through SLSA and GitHub attestations, which fits the security-tooling audience that may want to verify downloaded binaries and container images.

How it is used

Users write threat models in HCL, then use the CLI to validate, list, view, export, query, generate dashboards, render data-flow diagrams, parse Terraform output, or run a server. The optional `config.hcl` file can override default classifications, impact types, STRIDE elements, and dependency classifications.

Why package nerds care

For package nerds, threatcl is notable because it turns a security documentation practice into a normal source-controlled artifact with a CLI, Homebrew install, container image, GitHub Action, release attestations, and HCL syntax familiar to infrastructure engineers.

Timeline

• Project README: hcltm is renamed to threatcl.
• Current README: documents Homebrew, Docker, GitHub Actions, SLSA attestations, HCL threat models, GraphQL queries, Terraform parsing, and optional config.hcl.
• Current docs site: documents Homebrew, Go, Docker, and GitHub Actions getting-started flows.

Related projects

• Related projects and specifications include Terraform and HCL2, OWASP threat-modeling material, OpenThreatModel, go-dfd, GitHub Actions automation, and security-as-code workflows.

Sources

• https://github.com/threatcl/threatcl#readme - official README for rename from hcltm, goals, HCL basis, CLI commands, Homebrew install, release provenance, and config.hcl.
• https://threatcl.dev/ - official documentation site for getting started, Homebrew/Go/Docker/GitHub Actions installs, and example threat model.