使用 Homebrew 安装 threatcl

项目链接

• 主页

命令和别名

• threatcl

项目历史

The project frames threat modeling as a DevOps and version-control workflow: its README argues for a simple text-file format, a CLI-driven user experience, and integration with VCS. It builds on HashiCorp Configuration Language and the README explicitly connects that choice to Terraform familiarity and machine-readable structure.

采用历史

The official documentation positions threatcl for several installation and automation paths: Homebrew, Go install, Docker, and GitHub Actions. The README also documents release provenance through SLSA and GitHub attestations, which fits the security-tooling audience that may want to verify downloaded binaries and container images.

使用方式

Users write threat models in HCL, then use the CLI to validate, list, view, export, query, generate dashboards, render data-flow diagrams, parse Terraform output, or run a server. The optional `config.hcl` file can override default classifications, impact types, STRIDE elements, and dependency classifications.

为什么软件包爱好者会关心

For package nerds, threatcl is notable because it turns a security documentation practice into a normal source-controlled artifact with a CLI, Homebrew install, container image, GitHub Action, release attestations, and HCL syntax familiar to infrastructure engineers.

时间线

• Project README: hcltm is renamed to threatcl.
• Current README: documents Homebrew, Docker, GitHub Actions, SLSA attestations, HCL threat models, GraphQL queries, Terraform parsing, and optional config.hcl.
• Current docs site: documents Homebrew, Go, Docker, and GitHub Actions getting-started flows.

Related projects

• Related projects and specifications include Terraform and HCL2, OWASP threat-modeling material, OpenThreatModel, go-dfd, GitHub Actions automation, and security-as-code workflows.

来源

• https://github.com/threatcl/threatcl#readme - official README for rename from hcltm, goals, HCL basis, CLI commands, Homebrew install, release provenance, and config.hcl.
• https://threatcl.dev/ - official documentation site for getting started, Homebrew/Go/Docker/GitHub Actions installs, and example threat model.