threagile
Agile Threat Modeling Toolkit
파일 탐색기
최종 버전 다운로드 (.zip)- anchore-analysis.yml
- codeql-analysis.yml
- golangci-lint-action.yml
- gosec-analysis.yml
- main.go
- main.go
- config.json
- main.go
- main_test.go
- threagile-example-config.json
- threagile.yaml
- threagile.yaml
- guide.md
- language-reference.md
- testing.md
- asciidoctor-report.md
- commands.md
- config.md
- custom-risk-rules.md
- custom-theme.yml
- flags.md
- how-to.md
- includes.md
- macros.md
- mode-analyze.md
- mode-interactive.md
- mode-server.md
- model.md
- package-structure.png
- releases.md
- risk-rules.md
- analyze.go
- attacker-focus.go
- attractiveness.go
- config.go
- consts.go
- create.go
- execute.go
- explain.go
- flags.go
- import.go
- list.go
- print.go
- progress-reporter.go
- quit.go
- risk-excel-config.go
- root.go
- server.go
- threagile.go
- version.go
- examples.go
- author.go
- communication-link.go
- data-asset.go
- model.go
- overview.go
- risk-category.go
- risk-tracking.go
- risk.go
- shared-runtime.go
- strings.go
- technical-asset.go
- trust-boundary.go
- add-build-pipeline-macro.go
- add-vault-macro.go
- macros.go
- pretty-print-macro.go
- remove-unused-tags-macro.go
- seed-risk-tracking-macro.go
- seed-tags-macro.go
- custom-risk-category.go
- parse.go
- parse_test.go
- raa.go
- read.go
- runner.go
- adocReport.go
- colors.go
- excel-column.go
- excel-style.go
- excel.go
- generate.go
- graphviz.go
- json.go
- report-configuration.go
- report-helper.go
- report.go
- risk-group.go
- risk-item.go
- accidental_secret_leak_rule.go
- accidental_secret_leak_rule_test.go
- code_backdooring_rule.go
- code_backdooring_rule_test.go
- container_baseimage_backdooring_rule.go
- container_baseimage_backdooring_rule_test.go
- container_platform_escape_rule.go
- container_platform_escape_rule_test.go
- cross_site_request_forgery_rule.go
- cross_site_request_forgery_rule_test.go
- cross_site_scripting_rule.go
- cross_site_scripting_rule_test.go
- dos_risky_access_across_trust_boundary_rule.go
- dos_risky_access_across_trust_boundary_rule_test.go
- helpers.go
- helpers_test.go
- incomplete_model_rule.go
- incomplete_model_rule_test.go
- ldap_injection_rule.go
- ldap_injection_rule_test.go
- missing_authentication_rule.go
- missing_authentication_rule_test.go
- missing_authentication_second_factor_rule.go
- missing_authentication_second_factor_rule_test.go
- missing_build_infrastructure_rule.go
- missing_build_infrastructure_rule_test.go
- missing_cloud_hardening_rule.go
- missing_cloud_hardening_rule_test.go
- missing_file_validation_rule.go
- missing_file_validation_rule_test.go
- missing_hardening_rule.go
- missing_hardening_rule_test.go
- missing_identity_propagation_rule.go
- missing_identity_propagation_rule_test.go
- missing_identity_provider_isolation_rule.go
- missing_identity_provider_isolation_rule_test.go
- missing_identity_store_rule.go
- missing_identity_store_rule_test.go
- missing_network_segmentation_rule.go
- missing_network_segmentation_rule_test.go
- missing_vault_isolation_rule.go
- missing_vault_isolation_rule_test.go
- missing_vault_rule.go
- missing_vault_rule_test.go
- missing_waf_rule.go
- missing_waf_rule_test.go
- mixed_targets_on_shared_runtime_rule.go
- mixed_targets_on_shared_runtime_rule_test.go
- path_traversal_rule.go
- path_traversal_rule_test.go
- push_instead_of_pull_deployment_rule.go
- push_instead_of_pull_deployment_rule_test.go
- search_query_injection_rule.go
- search_query_injection_rule_test.go
- server_side_request_forgery_rule.go
- server_side_request_forgery_rule_test.go
- service_registry_poisoning_rule.go
- service_registry_poisoning_rule_test.go
- sql_nosql_injection_rule.go
- sql_nosql_injection_rule_test.go
- unchecked_deployment_rule.go
- unchecked_deployment_rule_test.go
- unencrypted_asset_rule.go
- unencrypted_asset_rule_test.go
- unencrypted_communication_rule.go
- unencrypted_communication_rule_test.go
- unguarded_access_from_internet_rule.go
- unguarded_access_from_internet_rule_test.go
- unguarded_direct_datastore_access_rule.go
- unguarded_direct_datastore_access_rule_test.go
- unnecessary_communication_link_rule.go
- unnecessary_communication_link_rule_test.go
- unnecessary_data_asset_rule.go
- unnecessary_data_asset_rule_test.go
- unnecessary_data_transfer_rule.go
- unnecessary_data_transfer_rule_test.go
- unnecessary_technical_asset_rule.go
- unnecessary_technical_asset_rule_test.go
- untrusted_deserialization_rule.go
- untrusted_deserialization_rule_test.go
- wrong_communication_link_content_rule.go
- wrong_communication_link_content_rule_test.go
- wrong_trust_boundary_content_rule.go
- wrong_trust_boundary_content_rule_test.go
- xml_external_entity_rule.go
- xml_external_entity_rule_test.go
- any-value.go
- any-value_test.go
- array-expression.go
- array-value.go
- array-value_test.go
- bool-expression.go
- bool-value.go
- bool-value_test.go
- built-in.go
- built-in_test.go
- cast.go
- cast_test.go
- compare.go
- compare_test.go
- decimal-expression.go
- decimal-value.go
- decimal-value_test.go
- event.go
- event_test.go
- explain-statement.go
- expression-list.go
- expression.go
- history.go
- history_test.go
- key-words.go
- literal.go
- literal_test.go
- path.go
- path_test.go
- property.go
- property_test.go
- scope.go
- scope_test.go
- statement.go
- string-expression.go
- string-value.go
- string-value_test.go
- value-expression.go
- value-list.go
- value.go
- values.go
- values_test.go
- all-expression.go
- and-expression.go
- and-expression_test.go
- any-expression.go
- any-expression_test.go
- array-expression.go
- contains-expression.go
- contains-expression_test.go
- count-expression.go
- equal-expression.go
- equal-expression_test.go
- equal-or-greater-expression.go
- equal-or-greater-expression_test.go
- equal-or-less-expression.go
- equal-or-less-expression_test.go
- expression-list.go
- expression-list_test.go
- false-expression.go
- false-expression_test.go
- greater-expression.go
- greater-expression_test.go
- less-expression.go
- less-expression_test.go
- not-equal-expression.go
- not-equal-expression_test.go
- or-expression.go
- or-expression_test.go
- true-expression.go
- true-expression_test.go
- value-expression.go
- value-expression_test.go
- blank.go
- equal.go
- false.go
- greater-or-equal.go
- greater.go
- item-with-path.go
- item.go
- less-or-equal.go
- less.go
- not-equal.go
- property_test.go
- texter.go
- true.go
- value.go
- assign-statement.go
- assign-statement_test.go
- defer-statement.go
- defer-statement_test.go
- explain-statement.go
- explain-statement_test.go
- if-statement.go
- if-statement_test.go
- loop-statement.go
- loop-statement_test.go
- method-statement.go
- method-statement_test.go
- return-statement.go
- return-statement_test.go
- statement-list.go
- statement-list_test.go
- statement.go
- statement_test.go
- method.go
- risk-rule.go
- risk-rule_test.go
- script.go
- script_test.go
- variable.go
- accidental-secret-leak.yaml
- accidental_secret_leak_test.go
- risks.go
- execute.go
- hash.go
- model.go
- progress-reporter.go
- report.go
- server.go
- token.go
- zip.go
- authentication.go
- authentication_test.go
- author.go
- authorization.go
- authorization_test.go
- communication_link.go
- confidentiality.go
- confidentiality_test.go
- criticality.go
- criticality_test.go
- data_asset.go
- data_breach_probability.go
- data_breach_probability_test.go
- data_format.go
- data_format_test.go
- date.go
- encryption_style.go
- encryption_style_test.go
- helpers.go
- model.go
- overview.go
- protocol.go
- protocol_test.go
- quantity.go
- quantity_test.go
- risk-category.go
- risk-rule.go
- risk-tracking.go
- risk.go
- risk_exploitation_impact.go
- risk_exploitation_impact_test.go
- risk_exploitation_likelihood.go
- risk_exploitation_likelihood_test.go
- risk_function.go
- risk_function_test.go
- risk_severity.go
- risk_severity_test.go
- risk_status.go
- risk_status_test.go
- risks.go
- shared_runtime.go
- stride.go
- stride_test.go
- technical_asset.go
- technical_asset_machine.go
- technical_asset_machine_test.go
- technical_asset_size.go
- technical_asset_size_test.go
- technical_asset_type.go
- technical_asset_type_test.go
- technologies.yaml
- technology-list.go
- technology-map.go
- technology.go
- trust_boundary.go
- trust_boundary_type.go
- trust_boundary_type_test.go
- types.go
- usage.go
- usage_test.go
- background.pdf
- threagile-logo.png
- edit-model.css
- edit-model.js
- property-editor.js
- schema.js
- android-chrome-192x192.png
- android-chrome-512x512.png
- apple-touch-icon.png
- edit-model.html
- favicon-16x16.png
- favicon-32x32.png
- favicon.ico
- index.html
- site.webmanifest
- threagile.png
- live-templates.txt
- openapi.yaml
- schema.json
- abuse_cases.yaml
- all.json
- all.yaml
- data_assets.yaml
- diagram_tweak.yaml
- main.yaml
- meta.yaml
- overview.yaml
- parsed-model.json
- parsed-model.yaml
- questions.yaml
- risk-category.yaml
- risk_categories.yaml
- risk_tracking.yaml
- security_requirements.yaml
- shared_runtimes.yaml
- tags.yaml
- technical_assets.yaml
- technical_assets_clients.yaml
- technical_assets_databases.yaml
- technical_assets_devops.yaml
- technical_assets_infrastructure.yaml
- technical_assets_servers.yaml
- trust_boundaries.yaml
- .dockerignore
- .gitignore
- .grype.yaml
- .pre-commit-config.yaml
- CODE_OF_CONDUCT.md
- CONTRIBUTING.md
- docker-build-local-threagile-image.sh
- docker-build-threagile-image.sh
- Dockerfile
- Dockerfile.local
- go-mod-tidy.sh
- go.mod
- go.sum
- LICENSE.txt
- Makefile
- README.md
- Taskfile.yml
- threagile.sh
# 설치 가이드
1. 코드 내려받기
git clone https://github.com/Threagile/threagile
깃허브에서 프로젝트 코드 전체를 내 컴퓨터로 내려받습니다.
cd threagile
방금 내려받은 프로젝트 폴더 안으로 이동합니다.
2. Docker
쉬움 추천사전 준비물
- Git GitHub에서 프로젝트 코드를 내려받으려면 필요합니다.
- Docker Desktop 컨테이너를 빌드하고 실행하려면 필요합니다. 설치 후 실행해서 백그라운드에 켜두세요.
docker run --rm -it threagile/threagile --help
빌드된 이미지를 실제 컨테이너로 실행합니다.
Docker Images: https://hub.docker.com/r/threagile/threagile
이 명령어를 터미널에 그대로 입력해 실행하세요.
If you want to create an example model (via docker) as a starting point to learn about Threagile just run:
이 명령어를 터미널에 그대로 입력해 실행하세요.
docker run --rm -it -v "$(pwd)":/app/work threagile/threagile --create-example-model --output /app/work
빌드된 이미지를 실제 컨테이너로 실행합니다.
If you want to create a minimal stub model (via docker) as a starting point for your own model just run:
이 명령어를 터미널에 그대로 입력해 실행하세요.
터미널에 docker compose ps 를 입력해 컨테이너들이 Up 상태인지 확인하세요. README에 포트 번호가 적혀있다면 브라우저에서 http://localhost:포트번호 로 접속해보세요.
이 레포의 README에 적힌 실제 명령어를 그대로 가져왔습니다.
3. Go
보통go build ./...
Go 프로그램을 컴파일해 실행 파일을 만듭니다.
go run .
따로 빌드하지 않고 바로 Go 프로그램을 실행합니다.
빌드가 에러 없이 끝나면 성공입니다. go run . 을 썼다면 터미널 출력을 확인하세요.
4. Make
보통사전 준비물
- Git GitHub에서 프로젝트 코드를 내려받으려면 필요합니다.
- Make Linux/macOS는 보통 기본 설치되어 있습니다. Windows는 별도 설치(예: MSYS2, WSL)가 필요합니다.
make
생성된 빌드 설정을 바탕으로 실제 컴파일을 진행해 실행 파일을 만듭니다.
에러 없이 끝나면 성공입니다. 생성된 실행 파일을 직접 실행해보세요.
// repository documentation
Was this content helpful?
(0 ratings)