Skip to content

Feature/lab2#375

Open
Rash1d1 wants to merge 6 commits intoinno-devops-labs:mainfrom
Rash1d1:feature/lab2
Open

Feature/lab2#375
Rash1d1 wants to merge 6 commits intoinno-devops-labs:mainfrom
Rash1d1:feature/lab2

Conversation

@Rash1d1
Copy link

@Rash1d1 Rash1d1 commented Feb 15, 2026 •
edited
Loading

  • Task 1 done — Threagile baseline model + risk analysis
  • Task 2 done — HTTPS variant + risk comparison

Rashid Badamshin added 6 commits February 8, 2026 17:17
add template
888a19c
docs: add lab1 submission
81b28c3
fix
a856363
docs: add lab2 submission with threagile baseline and secure models
7937e4a
fix: regenerate secure threat model with HTTPS and encryption controls
959f359 
- Update threagile-model.secure.yaml with security improvements:
  * Direct to App: protocol http → https
  * Proxy to App: protocol http → https
  * Persistent Storage: encryption none → transparent
- Regenerate secure/ outputs showing correct risk delta
- unencrypted-communication: 2 → 0 (-2 risks)
- unencrypted-asset: 2 → 1 (-1 risk)
docs: update submission2.md with accurate threat model analysis
70fadb9 
- Regenerate with actual baseline risk data (15 risks across 15 categories)
- Include accurate top 5 risks table with severity levels
- Add detailed explanations of each security concern
- Update delta table with correct counts:
  * unencrypted-communication: 2 → 0 (-2)
  * unencrypted-asset: 2 → 1 (-1)
- Explain why infrastructure fixes don't resolve app-level vulnerabilities
- Add architecture comparison and key learning points
@Rash1d1
Copy link
Author

Rash1d1 commented Feb 15, 2026

  • Task 1 done — Threagile baseline model + risk analysis
  • Task 2 done — HTTPS variant + risk comparison

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Rash1d1