Christian Schneider

Results 16 comments of Christian Schneider

Just FYI (in case it helps): Had similar issues with GitHub Workflow Actions building go-graphviz for Windows. The issue started to appear when "windows-latest" began referring to Windows Server 2022...

Yep, just verified it with macOS 11.2.3 Attached a GIF (dithered and low-res to be small enough) of how it is observed. ![Screen Recording 2021-03-09 at 14 10 03](https://user-images.githubusercontent.com/6897328/110476669-86f37b00-80e2-11eb-8f6f-8363d8efbfbd.gif)

Thx for the feedback. Yep, binary releases are important, very valid point. 👍🏻 For releasing binaries we've to consider two things: - Some users don't trust binary downloads and rather...

Thx for the feedback. Always looking for nice ideas and feature requests! Yep, targeting the soon to arrive 1.0.0 tagged release, a pure binary version (for all major OS of...

Did some tests with go-graphviz and it looks quite promising: it ships the Graphviz C code as well and it just requires CGO to be enabled during build to integrate...

thx, very cool... On what accesses/flows you'd like to contribute an Okta integration, assuming it's about the runtime of Threagile? Or is it about the model file, in terms of...

Good one! Will be added as well as document history (to have a version number for the model and changelog of changes by whom in a separate chapter document history)!

It's good security practice to run processes in containers as some other low-privileged user instead of root (see for example https://medium.com/@mccode/processes-in-containers-should-not-run-as-root-2feae3f0df3b ). Possibly it would be clearer to also add...

Nice idea... Yep, there is definitely some kind of indirect relationship between the processed assets as being based on the stored/sent/received ones. Even in some model-validating rules this is checked....

... speaking of inferring model values: It would probably also make sense to infer the C,I,A ratings (Confidentiality, Integrity, Availability) of technical components based on the highest data assets' C,I,A...