What's Changed

• Added GitLab support
• Various fixes to the Homepage and Navbar
• Prompt user to save model before quitting the app

Web application

The web application is provided as a .tar.gz file or a .zip file along with a software bill of materials (SBOM).

Docker container

Pull from docker hub using docker pull --platform linux/x86_64 owasp/threat-dragon:v2.2.0

Desktop version

Installing on Windows

Depending on the security applied in your Windows system, you may need to open the file properties
and check the 'Unblock' checkbox to allow Threat Dragon to run

Installing on MacOS

Use the disk image .dmg file to install on MacOS systems,
the Threat Dragon application .zip is used for automatic updates only

Selecting the Linux package to use

AppImage can be used for most Linux distributions and hardware platforms
The Snap image is available from the official snapcraft distribution
.rpm for Red Hat Linux, AIX, CentOS, Fedora
.deb for debian based Linux such as Ubuntu, Trisqel and Debian itself

Full Changelog: v2.1.3...v2.2.0

What's Changed

• I18N: Arabic translation
• Made language selection understandable
• Fixed graph container resizing issue
• Desktop menu saves diagram edits instead of discarding them

Web application

The web application is provided as a .tar.gz file or a .zip file along with a software bill of materials (SBOM).

Docker container

Pull from docker hub using docker pull --platform linux/x86_64 owasp/threat-dragon:v2.1.3

Desktop version

Installing on Windows

Depending on the security applied in your Windows system, you may need to open the file properties
and check the 'Unblock' checkbox to allow Threat Dragon to run

Installing on MacOS

Use the disk image .dmg file to install on MacOS systems,
the Threat Dragon application .zip is used for automatic updates only

Selecting the Linux package to use

AppImage can be used for most Linux distributions and hardware platforms
The Snap image is available from the official snapcraft distribution
.rpm for Red Hat Linux, AIX, CentOS, Fedora
.deb for debian based Linux such as Ubuntu, Trisqel and Debian itself

New Contributors

• @mmcdonald4tw made their first contribution in #787
• @raghav1030 made their first contribution in #822

Full Changelog: v2.1.2...v2.1.3

What's Changed

• feature that adds PLOT4ai alongside STRIDE and LINDDUN
• feature that adds access to Bitbucket repos alongside github
• fix bug that overwrites node properties when adding dataflows

Web application

The web application is provided as a .tar.gz file or a .zip file along with a software bill of materials (SBOM).

Docker container

Pull from docker hub using docker pull --platform linux/x86_64 owasp/threat-dragon:v2.1.2

Desktop version

Installing on Windows

Depending on the security applied in your Windows system, you may need to open the file properties
and check the 'Unblock' checkbox to allow Threat Dragon to run

Installing on MacOS

Use the disk image .dmg file to install on MacOS systems,
the Threat Dragon application .zip is used for automatic updates only

Selecting the Linux package to use

AppImage can be used for most Linux distributions and hardware platforms
The Snap image is available from the official snapcraft distribution
.rpm for Red Hat Linux, AIX, CentOS, Fedora
.deb for debian based Linux such as Ubuntu, Trisqel and Debian itself

Full Changelog: v2.1.1...v2.1.2

What's Changed

• Guard in electron for unsaved changes in both diagrams and threats

Web application

The web application is provided as a .tar.gz file or a .zip file along with a software bill of materials (SBOM).

Docker container

Pull from docker hub using docker pull --platform linux/x86_64 owasp/threat-dragon:v2.1.1

Desktop version

Installing on Windows

Depending on the security applied in your Windows system, you may need to open the file properties
and check the 'Unblock' checkbox to allow Threat Dragon to run

Installing on MacOS

Use the disk image .dmg file to install on MacOS systems,
the Threat Dragon application .zip is used for automatic updates only

Selecting the Linux package to use

AppImage can be used for most Linux distributions and hardware platforms
The Snap image is available from the official snapcraft distribution
.rpm for Red Hat Linux, AIX, CentOS, Fedora
.deb for debian based Linux such as Ubuntu, Trisqel and Debian itself

Full Changelog: v2.0.9...v2.1.1

What's Changed

• Guard in electron for unsaved changes

Web application

The web application is provided as a .tar.gz file or a .zip file along with a software bill of materials (SBOM).

Docker container

Pull from docker hub using docker pull --platform linux/x86_64 owasp/threat-dragon:v2.1.0

Desktop version

Installing on Windows

Depending on the security applied in your Windows system, you may need to open the file properties
and check the 'Unblock' checkbox to allow Threat Dragon to run

Installing on MacOS

Use the disk image .dmg file to install on MacOS systems,
the Threat Dragon application .zip is used for automatic updates only

Selecting the Linux package to use

AppImage can be used for most Linux distributions and hardware platforms
The Snap image is available from the official snapcraft distribution
.rpm for Red Hat Linux, AIX, CentOS, Fedora
.deb for debian based Linux such as Ubuntu, Trisqel and Debian itself

Full Changelog: v2.0.9...v2.1.0

What's Changed

• Ensure dataflow and trust boundary names are not lost when unselected

Web application

The web application is provided as a .tar.gz file or a .zip file along with a software bill of materials (SBOM).

Docker container

Pull from docker hub using docker pull --platform linux/x86_64 owasp/threat-dragon:v2.0.9

Desktop version

Installing on Windows

Depending on the security applied in your Windows system, you may need to open the file properties
and check the 'Unblock' checkbox to allow Threat Dragon to run

Installing on MacOS

Use the disk image .dmg file to install on MacOS systems,
the Threat Dragon application .zip is used for automatic updates only

Selecting the Linux package to use

AppImage can be used for most Linux distributions and hardware platforms
The Snap image is available from the official snapcraft distribution
.rpm for Red Hat Linux, AIX, CentOS, Fedora
.deb for debian based Linux such as Ubuntu, Trisqel and Debian itself

Full Changelog: v2.0.8...v2.0.9

What's Changed

• Diagram component properties now correctly displayed when selecting new component

Web application

The web application is provided as a .tar.gz file or a .zip file along with a software bill of materials (SBOM).

Docker container

Pull from docker hub using docker pull --platform linux/x86_64 owasp/threat-dragon:v2.0.8

Desktop version

Installing on Windows

Depending on the security applied in your Windows system, you may need to open the file properties
and check the 'Unblock' checkbox to allow Threat Dragon to run

Installing on MacOS

Use the disk image .dmg file to install on MacOS systems,
the Threat Dragon application .zip is used for automatic updates only

Selecting the Linux package to use

AppImage can be used for most Linux distributions and hardware platforms
The Snap image is available from the official snapcraft distribution
.rpm for Red Hat Linux, AIX, CentOS, Fedora
.deb for debian based Linux such as Ubuntu, Trisqel and Debian itself

Full Changelog: v2.0.7...v2.0.8

This release fixes a bug when editing the threat model diagrams: after selecting a trust boundary curve,
if this curve is selected again then editing of the diagram is not possible until the diagram is saved and closed

Desktop version

Installing on Windows

Depending on the security applied in your Windows system, you may need to open the file properties
and check the 'Unblock' checkbox to allow Threat Dragon to run

Installing on MacOS

Use the disk image .dmg file to install on MacOS systems,
the Threat Dragon application .zip is used for automatic updates only

Selecting the Linux package to use

AppImage can be used for most Linux distributions and hardware platforms
The Snap image is available from the official snapcraft distribution
.rpm for Red Hat Linux, AIX, CentOS, Fedora
.deb for debian based Linux such as Ubuntu, Trisqel and Debian itself

Web application

The web application is provided as a .tar.gz file or a .zip file along with a software bill of materials (SBOM).

Docker container

Pull from docker hub using docker pull --platform linux/x86_64 owasp/threat-dragon:v2.0.7

What's Changed

• update workflow actions to the latest by @jgadsden in #747
• over ride systeminformation version and update markdownlint by @jgadsden in #754
• fix bug where selecting a threat boundary curve throws an error by @jgadsden in #755

Full Changelog: v2.0.6...v2.0.7

This release adds:

• Two new GitHub-related env vars:
  • GITHUB_USE_SEARCH: if true, uses octonode's search.reposAsync instead of reposAsync passing in a search query
  • GITHUB_SEARCH_QUERY: specifies the search query to use when searching for repos for Threat Dragon to use
• Fixes for various niggles with the drawing styles and abilities:
  • allow change in aspect ratio for diagram components
  • selecting a data flow or a trust boundary by double clicking
  • provide bidirectional option for data flows
  • line widths and dashed ratios modified
  • provide new data flow when a double click is received on a node
• Translation for Finnish

Web application

The web application is provided as a .tar.gz file or a .zip file along with a software bill of materials (SBOM).

Docker container

Pull from docker hub using docker pull --platform linux/x86_64 owasp/threat-dragon:v2.0.6

Desktop version

Installing on Windows

Depending on the security applied in your Windows, you may need to open the file properties
and check the 'Unblock' checkbox to allow Threat Dragon to run

Installing on MacOS

Use the disk image .dmg file to install on MacOS systems,
the Threat Dragon application .zip is used for automatic updates only

Selecting the Linux package to use

AppImage can be used for most Linux distributions and hardware platforms
The Snap image is available from the official snapcraft distribution
.rpm for Red Hat Linux, AIX, CentOS, Fedora
.deb for debian based Linux such as Ubuntu, Trisqel and Debian itself

Web application

The web application is provided as a .tar.gz file or a .zip file with a software bill of materials (SBOM)

Desktop version

Installing on Windows

Depending on the security applied in your Windows, you may need to open the file properties
and check the 'Unblock' checkbox to allow Threat Dragon to run

Installing on MacOS

Use the disk image .dmg file to install on MacOS systems,
the Threat Dragon application .zip is used for automatic updates only

Selecting the Linux package to use

AppImage can be used for most Linux distributions and hardware platforms
The Snap image is available from the official snapcraft distribution
.rpm for Red Hat Linux, AIX, CentOS, Fedora
.deb for debian based Linux such as Ubuntu, Trisqel and Debian itself

Docker container

Pull from docker hub using docker pull --platform linux/x86_64 owasp/threat-dragon:v2.0.4

New Contributors

• @HugoReeves made their first contribution in #712
• @Zmiler made their first contribution in #713

Full Changelog: v2.0.3...v2.0.4