docs: add threat model and security documentation hub#373
Merged
WilliamBerryiii merged 5 commits intomainfrom Feb 27, 2026
Merged
docs: add threat model and security documentation hub#373WilliamBerryiii merged 5 commits intomainfrom
WilliamBerryiii merged 5 commits intomainfrom
Conversation
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.OpenSSF ScorecardScorecard details
Scanned Files
|
agreaves-ms
approved these changes
Feb 27, 2026
- create docs/security/threat-model.md with 19-entry STRIDE registry - relocate docs/security-guide.md to docs/security/security-guide.md - update cross-references in README.md and SECURITY.md - add 6 terms to cspell dictionary 🔐 - Generated by Copilot
- create docs/security/README.md hub page modeled after hve-core - fix broken relative links in security-guide.md for LICENSE and contributing - add threat model cross-reference to security-guide.md references table - add opening paragraph to threat-model.md - update SECURITY.md and README.md to route through security hub 📄 - Generated by Copilot
WilliamBerryiii
force-pushed
the
docs/issue-114-threat-model-password-security
branch
from
3c2a521 to
33afd25
Compare
- update basic-ftp to resolve critical path traversal vulnerability - update minimatch to resolve high severity ReDoS vulnerability - update markdownlint-cli2 to 0.21.0 to resolve moderate ReDoS in markdown-it 🔒 - Generated by Copilot
- add **/.venv/** ignore pattern for nested virtual environments - configure MD060 table-column-style rule for leading_and_trailing 🔧 - Generated by Copilot
🎨 - Generated by Copilot
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Add a STRIDE-based threat model covering the end-to-end robotics training pipeline, create a security documentation hub page, and consolidate all security docs under
docs/security/. The threat model documents 19 threats across six STRIDE categories with trust boundary analysis, a remediation roadmap, and security metrics. The hub page provides a single entry point for all security documentation. Cross-references inREADME.md,SECURITY.md, and the security guide are updated to point at the new hub.Closes #114
Type of Change
Component(s) Affected
deploy/000-prerequisites- Azure subscription setupdeploy/001-iac- Terraform infrastructuredeploy/002-setup- OSMO control plane / Helmdeploy/004-workflow- Training workflowssrc/training- Python training scriptsdocs/- DocumentationTesting Performed
planreviewed (no unexpected changes)applytested in dev environmentsmoke_test_azure.py)Additional validation:
Documentation Impact
Checklist