leathal1/TITO Threat Model

Automated threat modeling with STRIDE-LM, MAESTRO, MITRE ATT&CK, Semgrep SAST, and attack path analysis. Shift security left — threat model every PR.

Trust Signals

workflow.ymlSHA-pinned

uses: leathal1/tito@19bb11b20bd9b616309701ea058ac9a7a99b5245 # v2.3.1

tags can be moved; commit SHAs can't. why a SHA?

name	description	required	default
repo	Repository path to scan (defaults to workspace)	no	.
mode	Scan mode: full, quick, or diff	no	full
output	Output file path	no	threat-model.md
output-format	Output format: markdown, html, json, sarif	no	markdown
maestro	Enable MAESTRO agentic AI analysis	no	false
mitre	Enable MITRE ATT&CK mapping	no	false
semgrep	Enable Semgrep SAST integration	no	false
attack-paths	Enable attack path analysis	no	true
three-d	Generate 3D interactive visualization	no	false
diff-base	Base branch/ref for threat diffing (enables diff mode)	no	""
diff-head	Head branch/ref for threat diffing	no	""
fail-on	Fail the action on severity: critical, high, medium, any, never	no	never
config	Path to TITO config file (tito.yaml)	no	""
rules	Path to custom rules directory	no	""
comment-on-pr	Post threat model as PR comment	no	true
upload-artifact	Upload report as GitHub artifact	no	true
sarif-upload	Upload SARIF to GitHub Security tab	no	false
badge	Generate security badge	no	false
version	TITO version to install (e.g., v2.1.0, latest)	no	latest

name	description
threats-total	Total number of threats found
threats-critical	Number of critical severity threats
threats-high	Number of high severity threats
threats-medium	Number of medium severity threats
threats-low	Number of low severity threats
attack-paths-count	Number of attack paths found
report-path	Path to the generated report
sarif-path	Path to SARIF output (if generated)
badge-url	Shield.io badge URL for threat status
exit-code	TITO exit code (0=pass, 1=warnings, 2=fail)