owasp / www-project-threat-dragon

OWASP Foundation Threat Dragon Project Web Repository

OWASP Foundation Threat Dragon Homepage

This repo is the source for the OWASP Threat Dragon project web pages and the Threat Dragon documentation for version 1.x and for version 2.x.

Create issues on this repository only for content hosted on the OWASP project site, including the documentation. For issues or suggestions related to the Threat Dragon tool itself use the Threat Dragon repository.

You can contact the Threat Dragon community via the OWASP Slack #project-threat-dragon project channel, and you may need to subscribe first.

Project leaders

• Mike Goodwin
• Jon Gadsden
• Leo Reading

www-project-threat-dragon's Issues

Update utilities section for Dragon-GPT

It would be good to add Dragon-GPT into the documentation, and update the section on utilities

Styling Issue: Words sticking to the end of the screen at 90% width

I encountered a styling issue where, at a 90% screen width, the words within a block are sticking to the very end of the screen. This behavior is not observed at other screen widths, where the layout appears as expected.

Steps to Reproduce:
Open the application/page in a browser.
Resize the browser window to 90% width.
Navigate to the specific page or section where the issue is occurring.
Observe that the words within a block stick to the very end of the screen.
Expected Behavior:
"At 90% screen width, there should be an appropriate margin around the block, preventing the words from sticking to the edge of the screen. This behavior is expected to be consistent across different screen widths."

Actual Behavior:
"At 90% or 100% screen width, the words within a block are not respecting the margin, and they appear to be sticking to the very end of the screen. This issue is not present at other screen widths."

Screenshots:

I have tested this issue on multiple browsers and devices, and the problem persists. The issue is specific to a particular screen width (90% or 100%).

Conclusion:
This styling issue affects the visual presentation of the content, specifically at a 90% screen width, and needs attention to ensure a consistent and visually pleasing layout across different screen sizes.

Add to leaders list

Hello @mike-goodwin and @OWASPFoundation
It would be good if I could be added to the leaders list so that I can take on some of the admin for Treat Dragon project development. Suggest:

• Jon Gadsden
  I have submitted pull request #4 for this

Transfer previous content

Hello @mike-goodwin , as a starting point we could transfer the existing content from :
https://github.com/OWASP/www-project-threat-dragon/blob/master/migrated_content.md
into this new OWASP project page

Document new environment variables

We need to document the new GITHUB_USE_SEARCH and GITHUB_SEARCH_QUERY environment variables introduced in pull request #737

Standardize Docker Image Location

Describe what change you would like:
The docker image is sometimes referenced as threatdragon/owasp-threat-dragon, but in the README it states that the image is maintained in the OWASP org (awesome, btw! I know that this has been a wishlist item for a long time now!)

Context:
It would be great if we could reference the same org/image consistently. :)

Add step by step for gitlab access

Describe what change you would like:
We have step-by-step instructions for github and bitbucket, it would be good to have this for gitlab

Context:

Downloads on project page

hi
the downloads section on the project page is still pointing to mike goodwins' github content.
(there are other similar cases on threatdragon.org but I suppose this is not OWASP content)

tx

Make clear that web app can be used for local filesystem

Describe what change you would like:
The documentation suggests that github is a requirement to run Threat Dragon as a web application, which is incorrect
The documentation needs to be changed so that it is clear that any of these will work for the web application:

• local file access
• github
• bitbucket
• gitlab

Context:

Provide gitlab and bitbucket for demo site

Describe what change you would like:
The demo site only supports github, it would be good to configure it to provide gitlab and bitbucket as well

Context:

migrate docs to OWASP

Describe what change you would like
We need to migrate the Threat Dragon documentation to this repo in the OWASP organisation

Context
Version 2.x docs are found at https://www.threatdragon.com/docs/
and version 1.x docs at https://threatdragon.github.io/
both of these should be accessible within https://owasp.org/www-project-threat-dragon/

Fix-up title and website added

It would be good for the repo title to be 'OWASP Foundation project Threat Dragon' instead of 'OWASP Foundation Web Respository '. In addition the website field should be 'https://owasp.org/www-project-threat-dragon/'

Create info tab for right hand side pane

The file info.md is used in the right hand pane for project information. This needs filling out, similar to :
https://raw.githubusercontent.com/OWASP/www-project-juice-shop/master/info.md
and
https://raw.githubusercontent.com/OWASP/www-project-cyber-defense-matrix/master/info.md

Inconsistent header behaviour in small screens

Issue :

The Header has inconsistent styling in smaller devices for screen resolution < 420px and can be improved.

Solution 1
The buttons wrapper can be used the css flex property, so that the styles are consistent and responsive.

Solution 2
The Header can be adjusted to hide these buttons in the header section

I would like to contribute to solve this issue.

Document new diagram features

Pull request #742 in the Threat Dragon repo has introduced new features and enhancements for the threat model diagrams.
These need to be documented