Releases: OWASP/threat-dragon
Version 2.3.0
What's Changed
- suggest threats by element
- suggest threats by context
- added google sign-in feature
- new translation for Bahasa Indonesia
- new translation for Malay
- new translation for Japanese
- improvements to the diagram editing
- builds for ARM64 platforms
- provide SBOMs
- support custom Gitlab instance
Full Changelog: v2.2.0...v2.3.0
Web application
The web application is provided as a .tar.gz file or a .zip file along with a software bill of materials ([SBOM][sboms]).
Docker container
The docker images are available from Dockerhub:
- For X86 platforms pull the image:
docker pull --platform linux/x86_64 owasp/threat-dragon:v2.3.0 - Alternatively for ARM64 platforms:
docker pull --platform linux/arm64 owasp/threat-dragon:v2.3.0-arm64
Desktop version
| Platform | File | SHA512 |
|---|---|---|
| Windows NSIS installer (TBA) | Threat-Dragon-ng-Setup-2.3.0.exe (TBA) | checksum.yml (TBA) |
| MacOS installer x86 | Threat-Dragon-ng-2.3.0.dmg | checksum-mac.yml |
| MacOS installer ARM64 | Threat-Dragon-ng-2.3.0-arm64.dmg | checksum-mac-arm64.yml |
| Linux AppImage | Threat-Dragon-ng-2.3.0.AppImage | checksum-linux.yml |
| Debian package, AMD64 | threat-dragon_2.3.0_amd64.deb | |
| Redhat package manager, X86 64 bit | threat-dragon-2.3.0.x86_64.rpm | |
| Linux Snap | direct from Snapcraft |
Software Bill of Materials
SBOMS are provided for the server and for the frontend application including desktop.
Installing on Windows (TBA)
Download and run the NSIS executable. Depending on the security applied in your Windows system,
you may need to open the file properties and check the 'Unblock' checkbox to allow Threat Dragon to run
Installing on MacOS
To install on MacOS systems download and run the disk image .dmg file , either the x86 or arm64 version.
Note that the MacOS .zip files are used for automatic updates, and are not recommended for installation.
Installing on Linux
Select the method that is most convenient for your distribution of Linux:
AppImagecan be used for most Linux distributions and hardware platforms- a Snap image is available from the official Snapcraft distribution
.rpmfor Red Hat Linux, AIX, CentOS, Fedora.debfor debian based Linux such as Ubuntu, Trisqel and Debian itself
New Contributors
- @jksolbakken made their first contribution in #914
- @mohamedselbohy made their first contribution in #910
- @teguh02 made their first contribution in #923
- @m10k made their first contribution in #933
- @pzrq made their first contribution in #940
- @michaelgrahamevans made their first contribution in #942
- @alexvorndran made their first contribution in #951
- @moerketh made their first contribution in #952
- @jason-meredith-rewind made their first contribution in #959
- @jkowalleck made their first contribution in #964
- @4xpl0r3r made their first contribution in #965
- @ch-lepp made their first contribution in #996
- @mi0x made their first contribution in #1047
- @bryng001 made their first contribution in #1092
- @assarbad made their first contribution in #1115
Contributors
Assets 20
Version 2.2.0
What's Changed
- Added GitLab support
- Various fixes to the Homepage and Navbar
- Prompt user to save model before quitting the app
Web application
The web application is provided as a .tar.gz file or a .zip file along with a software bill of materials (SBOM).
Docker container
Pull from docker hub using docker pull --platform linux/x86_64 owasp/threat-dragon:v2.2.0
Desktop version
| Platform | File | SHA512 |
|---|---|---|
| Windows NSIS installer | Threat-Dragon-ng-Setup-2.2.0.exe | checksum.yml |
| MacOS installer | Threat-Dragon-ng-2.2.0.dmg | checksum-mac.yml |
| Linux AppImage | Threat-Dragon-ng-2.2.0.AppImage | checksum-linux.yml |
| Debian package, AMD64 | threat-dragon_2.2.0_amd64.deb | |
| Redhat package manager, X86 64 bit | threat-dragon-2.2.0.x86_64.rpm |
Installing on Windows
Depending on the security applied in your Windows system, you may need to open the file properties
and check the 'Unblock' checkbox to allow Threat Dragon to run
Installing on MacOS
Use the disk image .dmg file to install on MacOS systems,
the Threat Dragon application .zip is used for automatic updates only
Selecting the Linux package to use
AppImage can be used for most Linux distributions and hardware platforms
The Snap image is available from the official snapcraft distribution
.rpm for Red Hat Linux, AIX, CentOS, Fedora
.deb for debian based Linux such as Ubuntu, Trisqel and Debian itself
Full Changelog: v2.1.3...v2.2.0
Version 2.1.3
What's Changed
- I18N: Arabic translation
- Made language selection understandable
- Fixed graph container resizing issue
- Desktop menu saves diagram edits instead of discarding them
Web application
The web application is provided as a .tar.gz file or a .zip file along with a software bill of materials (SBOM).
Docker container
Pull from docker hub using docker pull --platform linux/x86_64 owasp/threat-dragon:v2.1.3
Desktop version
| Platform | File | SHA512 |
|---|---|---|
| Windows NSIS installer | Threat-Dragon-ng-Setup-2.1.3.exe | checksum.yml |
| MacOS installer | Threat-Dragon-ng-2.1.3.dmg | checksum-mac.yml |
| Linux AppImage | Threat-Dragon-ng-2.1.3.AppImage | checksum-linux.yml |
| Debian package, AMD64 | threat-dragon_2.1.3_amd64.deb | |
| Redhat package manager, X86 64 bit | threat-dragon-2.1.3.x86_64.rpm |
Installing on Windows
Depending on the security applied in your Windows system, you may need to open the file properties
and check the 'Unblock' checkbox to allow Threat Dragon to run
Installing on MacOS
Use the disk image .dmg file to install on MacOS systems,
the Threat Dragon application .zip is used for automatic updates only
Selecting the Linux package to use
AppImage can be used for most Linux distributions and hardware platforms
The Snap image is available from the official snapcraft distribution
.rpm for Red Hat Linux, AIX, CentOS, Fedora
.deb for debian based Linux such as Ubuntu, Trisqel and Debian itself
New Contributors
- @mmcdonald4tw made their first contribution in #787
- @raghav1030 made their first contribution in #822
Full Changelog: v2.1.2...v2.1.3
Contributors
Assets 18
Version 2.1.2
What's Changed
- feature that adds PLOT4ai alongside STRIDE and LINDDUN
- feature that adds access to Bitbucket repos alongside github
- fix bug that overwrites node properties when adding dataflows
Web application
The web application is provided as a .tar.gz file or a .zip file along with a software bill of materials (SBOM).
Docker container
Pull from docker hub using docker pull --platform linux/x86_64 owasp/threat-dragon:v2.1.2
Desktop version
| Platform | File | SHA 512 |
|---|---|---|
| Windows NSIS installer | Threat-Dragon-ng-Setup-2.1.2.exe | checksum.yml |
| MacOS installer | Threat-Dragon-ng-2.1.2.dmg | checksum-mac.yml |
| Linux AppImage | Threat-Dragon-ng-2.1.2.AppImage | checksum-linux.yml |
| Debian package, AMD64 | threat-dragon_2.1.2_amd64.deb | |
| Redhat package manager, X86 64 bit | threat-dragon-2.1.2.x86_64.rpm |
Installing on Windows
Depending on the security applied in your Windows system, you may need to open the file properties
and check the 'Unblock' checkbox to allow Threat Dragon to run
Installing on MacOS
Use the disk image .dmg file to install on MacOS systems,
the Threat Dragon application .zip is used for automatic updates only
Selecting the Linux package to use
AppImage can be used for most Linux distributions and hardware platforms
The Snap image is available from the official snapcraft distribution
.rpm for Red Hat Linux, AIX, CentOS, Fedora
.deb for debian based Linux such as Ubuntu, Trisqel and Debian itself
Full Changelog: v2.1.1...v2.1.2
Version 2.1.1
What's Changed
- Guard in electron for unsaved changes in both diagrams and threats
Web application
The web application is provided as a .tar.gz file or a .zip file along with a software bill of materials (SBOM).
Docker container
Pull from docker hub using docker pull --platform linux/x86_64 owasp/threat-dragon:v2.1.1
Desktop version
| Platform | File | SHA 512 |
|---|---|---|
| Windows NSIS installer | Threat-Dragon-ng-Setup-2.1.1.exe | checksum-sha512.yml |
| MacOS installer | Threat-Dragon-ng-2.1.1.dmg | checksum-sha512-mac.yml |
| Linux AppImage | Threat-Dragon-ng-2.1.1.AppImage | checksum-sha512-linux.yml |
| Debian package, AMD64 | threat-dragon_2.1.1_amd64.deb | |
| Redhat package manager, X86 64 bit | threat-dragon-2.1.1.x86_64.rpm |
Installing on Windows
Depending on the security applied in your Windows system, you may need to open the file properties
and check the 'Unblock' checkbox to allow Threat Dragon to run
Installing on MacOS
Use the disk image .dmg file to install on MacOS systems,
the Threat Dragon application .zip is used for automatic updates only
Selecting the Linux package to use
AppImage can be used for most Linux distributions and hardware platforms
The Snap image is available from the official snapcraft distribution
.rpm for Red Hat Linux, AIX, CentOS, Fedora
.deb for debian based Linux such as Ubuntu, Trisqel and Debian itself
Full Changelog: v2.0.9...v2.1.1
Version 2.1.0
What's Changed
- Guard in electron for unsaved changes
Web application
The web application is provided as a .tar.gz file or a .zip file along with a software bill of materials (SBOM).
Docker container
Pull from docker hub using docker pull --platform linux/x86_64 owasp/threat-dragon:v2.1.0
Desktop version
| Platform | File | checksum |
|---|---|---|
| Windows NSIS installer | Threat-Dragon-ng-Setup-2.1.0.exe | latest.yml |
| MacOS installer | Threat-Dragon-ng-2.1.0.dmg | latest-mac.yml |
| Linux AppImage | Threat-Dragon-ng-2.1.0.AppImage | latest-linux.yml |
| Debian package, AMD64 | threat-dragon_2.1.0_amd64.deb | |
| Redhat package manager, X86 64 bit | threat-dragon-2.1.0.x86_64.rpm |
Installing on Windows
Depending on the security applied in your Windows system, you may need to open the file properties
and check the 'Unblock' checkbox to allow Threat Dragon to run
Installing on MacOS
Use the disk image .dmg file to install on MacOS systems,
the Threat Dragon application .zip is used for automatic updates only
Selecting the Linux package to use
AppImage can be used for most Linux distributions and hardware platforms
The Snap image is available from the official snapcraft distribution
.rpm for Red Hat Linux, AIX, CentOS, Fedora
.deb for debian based Linux such as Ubuntu, Trisqel and Debian itself
Full Changelog: v2.0.9...v2.1.0
Version 2.0.9
What's Changed
- Ensure dataflow and trust boundary names are not lost when unselected
Web application
The web application is provided as a .tar.gz file or a .zip file along with a software bill of materials (SBOM).
Docker container
Pull from docker hub using docker pull --platform linux/x86_64 owasp/threat-dragon:v2.0.9
Desktop version
| Platform | File | checksum |
|---|---|---|
| Windows NSIS installer | Threat-Dragon-ng-Setup-2.0.9.exe | latest.yml |
| MacOS installer | Threat-Dragon-ng-2.0.9.dmg | latest-mac.yml |
| Linux AppImage | Threat-Dragon-ng-2.0.9.AppImage | latest-linux.yml |
| Debian package, AMD64 | threat-dragon_2.0.9_amd64.deb | |
| Redhat package manager, X86 64 bit | threat-dragon-2.0.9.x86_64.rpm |
Installing on Windows
Depending on the security applied in your Windows system, you may need to open the file properties
and check the 'Unblock' checkbox to allow Threat Dragon to run
Installing on MacOS
Use the disk image .dmg file to install on MacOS systems,
the Threat Dragon application .zip is used for automatic updates only
Selecting the Linux package to use
AppImage can be used for most Linux distributions and hardware platforms
The Snap image is available from the official snapcraft distribution
.rpm for Red Hat Linux, AIX, CentOS, Fedora
.deb for debian based Linux such as Ubuntu, Trisqel and Debian itself
Full Changelog: v2.0.8...v2.0.9
Version 2.0.8
What's Changed
- Diagram component properties now correctly displayed when selecting new component
Web application
The web application is provided as a .tar.gz file or a .zip file along with a software bill of materials (SBOM).
Docker container
Pull from docker hub using docker pull --platform linux/x86_64 owasp/threat-dragon:v2.0.8
Desktop version
| Platform | File | checksum |
|---|---|---|
| Windows NSIS installer | Threat-Dragon-ng-Setup-2.0.8.exe | latest.yml |
| MacOS installer | Threat-Dragon-ng-2.0.8.dmg | latest-mac.yml |
| Linux AppImage | Threat-Dragon-ng-2.0.8.AppImage | latest-linux.yml |
| Debian package, AMD64 | threat-dragon_2.0.8_amd64.deb | |
| Redhat package manager, X86 64 bit | threat-dragon-2.0.8.x86_64.rpm |
Installing on Windows
Depending on the security applied in your Windows system, you may need to open the file properties
and check the 'Unblock' checkbox to allow Threat Dragon to run
Installing on MacOS
Use the disk image .dmg file to install on MacOS systems,
the Threat Dragon application .zip is used for automatic updates only
Selecting the Linux package to use
AppImage can be used for most Linux distributions and hardware platforms
The Snap image is available from the official snapcraft distribution
.rpm for Red Hat Linux, AIX, CentOS, Fedora
.deb for debian based Linux such as Ubuntu, Trisqel and Debian itself
Full Changelog: v2.0.7...v2.0.8
Version 2.0.7
This release fixes a bug when editing the threat model diagrams: after selecting a trust boundary curve,
if this curve is selected again then editing of the diagram is not possible until the diagram is saved and closed
Desktop version
| Platform | File | checksum |
|---|---|---|
| Windows NSIS installer | Threat-Dragon-ng-Setup-2.0.7.exe | latest.yml |
| MacOS installer | Threat-Dragon-ng-2.0.7.dmg | latest-mac.yml |
| Linux AppImage | Threat-Dragon-ng-2.0.7.AppImage | latest-linux.yml |
| Debian package, AMD64 | threat-dragon_2.0.7_amd64.deb | |
| Redhat package manager, X86 64 bit | threat-dragon-2.0.7.x86_64.rpm |
Installing on Windows
Depending on the security applied in your Windows system, you may need to open the file properties
and check the 'Unblock' checkbox to allow Threat Dragon to run
Installing on MacOS
Use the disk image .dmg file to install on MacOS systems,
the Threat Dragon application .zip is used for automatic updates only
Selecting the Linux package to use
AppImage can be used for most Linux distributions and hardware platforms
The Snap image is available from the official snapcraft distribution
.rpm for Red Hat Linux, AIX, CentOS, Fedora
.deb for debian based Linux such as Ubuntu, Trisqel and Debian itself
Web application
The web application is provided as a .tar.gz file or a .zip file along with a software bill of materials (SBOM).
Docker container
Pull from docker hub using docker pull --platform linux/x86_64 owasp/threat-dragon:v2.0.7
What's Changed
- update workflow actions to the latest by @jgadsden in #747
- over ride systeminformation version and update markdownlint by @jgadsden in #754
- fix bug where selecting a threat boundary curve throws an error by @jgadsden in #755
Full Changelog: v2.0.6...v2.0.7
Contributors
Assets 15
Version 2.0.6
This release adds:
- Two new GitHub-related env vars:
- GITHUB_USE_SEARCH: if true, uses octonode's search.reposAsync instead of reposAsync passing in a search query
- GITHUB_SEARCH_QUERY: specifies the search query to use when searching for repos for Threat Dragon to use
- Fixes for various niggles with the drawing styles and abilities:
- allow change in aspect ratio for diagram components
- selecting a data flow or a trust boundary by double clicking
- provide bidirectional option for data flows
- line widths and dashed ratios modified
- provide new data flow when a double click is received on a node
- Translation for Finnish
Web application
The web application is provided as a .tar.gz file or a .zip file along with a software bill of materials (SBOM).
Docker container
Pull from docker hub using docker pull --platform linux/x86_64 owasp/threat-dragon:v2.0.6
Desktop version
| Platform | File | checksum |
|---|---|---|
| Windows NSIS installer | Threat-Dragon-ng-Setup-2.0.6.exe | latest.yml |
| MacOS installer | Threat-Dragon-ng-2.0.6.dmg | latest-mac.yml |
| Linux AppImage | Threat-Dragon-ng-2.0.6.AppImage | latest-linux.yml |
| Debian package, AMD64 | threat-dragon_2.0.6_amd64.deb | |
| Redhat package manager, X86 64 bit | threat-dragon-2.0.6.x86_64.rpm |
Installing on Windows
Depending on the security applied in your Windows, you may need to open the file properties
and check the 'Unblock' checkbox to allow Threat Dragon to run
Installing on MacOS
Use the disk image .dmg file to install on MacOS systems,
the Threat Dragon application .zip is used for automatic updates only
Selecting the Linux package to use
AppImage can be used for most Linux distributions and hardware platforms
The Snap image is available from the official snapcraft distribution
.rpm for Red Hat Linux, AIX, CentOS, Fedora
.deb for debian based Linux such as Ubuntu, Trisqel and Debian itself