--- title: Threat Modeling for CI/CD Pipeline | DevSecOps Hospital... description: A walkthrough of building a threat model for a hospital management CI/CD pipeline using Microsoft Threat Modeling Tool and the STRIDE methodology. The tutorial... canonical: https://daily.dev/posts/threat-modeling-for-ci-cd-pipeline-devsecops-hospital-management-system-owmbg0iof twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Threat Modeling for CI/CD Pipeline | DevSecOps Hospital Management System | daily.dev og:description: A walkthrough of building a threat model for a hospital management CI/CD pipeline using Microsoft Threat Modeling Tool and the STRIDE methodology. The tutorial... og:url: https://daily.dev/posts/threat-modeling-for-ci-cd-pipeline-devsecops-hospital-management-system-owmbg0iof og:image: https://api.daily.dev/og/posts/OWmBg0iOF.png og:image:alt: Threat Modeling for CI/CD Pipeline | DevSecOps Hospital Management System og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Threat Modeling for CI/CD Pipeline | DevSecOps Hospital Management System **[YouTube](https://daily.dev/sources/youtube)** · 20 min read · 1 upvotes · 0 comments ## Summary A walkthrough of building a threat model for a hospital management CI/CD pipeline using Microsoft Threat Modeling Tool and the STRIDE methodology. The tutorial covers setting up data flow diagrams with Azure DevOps, Azure Container Registry, and AKS (Azure Kubernetes Service), defining trust zones (internet, DevOps, AKS cluster), modeling communication protocols (HTTPS, TLS over TCP) for HIPAA compliance, and generating a vulnerability report. The generated report identifies 66 threats categorized by STRIDE (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege). Mitigation steps are deferred to a follow-up session. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [How to Apply STRIDE Threat Modeling and SonarQube Analysis for Secure Software Development](https://daily.dev/posts/how-to-apply-stride-threat-modeling-and-sonarqube-analysis-for-secure-software-development-7c89ndix8) · freeCodeCamp · 2 upvotes · 0 comments - [Threat Modeling Meets Agents: Security-Focused AI Agents for Hardening CI/CD Pipelines](https://daily.dev/posts/threat-modeling-meets-agents-security-focused-ai-agents-for-hardening-ci-cd-pipelines-erjzhsaaz) · Software Testing Magazine · 17 upvotes · 0 comments - [Cisco Launches Global Threat Modeling Security Assessment Service for Threat-Informed Defense](https://daily.dev/posts/cisco-launches-global-threat-modeling-security-assessment-service-for-threat-informed-defense-2jqbxntpc) · Cisco · 0 upvotes · 0 comments - [Applying data-flow diagrams to security threat modelling](https://daily.dev/posts/applying-data-flow-diagrams-to-security-threat-modelling-nu0lafcf3) · Security Boulevard · 0 upvotes · 0 comments - [Securing the Code Factory: Why SDLC Infrastructure Has Become a Core Cloud Risk](https://daily.dev/posts/securing-the-code-factory-why-sdlc-infrastructure-has-become-a-core-cloud-risk-6rypdd9ra) · SD Times · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#kubernetes](https://daily.dev/tags/kubernetes), [#cicd](https://daily.dev/tags/cicd), [#devsecops](https://daily.dev/tags/devsecops), [#azure-devops](https://daily.dev/tags/azure-devops) [View this post on daily.dev](https://daily.dev/posts/threat-modeling-for-ci-cd-pipeline-devsecops-hospital-management-system-owmbg0iof) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Threat Modeling for CI/CD Pipeline | DevSecOps Hospital Management System","url":"https://daily.dev/posts/threat-modeling-for-ci-cd-pipeline-devsecops-hospital-management-system-owmbg0iof","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/threat-modeling-for-ci-cd-pipeline-devsecops-hospital-management-system-owmbg0iof"},"datePublished":"2026-07-09T08:03:53.653Z","dateModified":"2026-09-13T19:14:07.524Z","description":"A walkthrough of building a threat model for a hospital management CI/CD pipeline using Microsoft Threat Modeling Tool and the STRIDE methodology. The tutorial...","image":"https://i.ytimg.com/vi/23y1aYsnR9M/sddefault.jpg","thumbnailUrl":"https://i.ytimg.com/vi/23y1aYsnR9M/sddefault.jpg","isAccessibleForFree":true,"articleSection":"YouTube","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"YouTube","logo":"https://media.daily.dev/image/upload/s--W5zMumpP--/f_auto/v1725350181/logos/youtube","url":"https://daily.dev/sources/youtube"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/threat-modeling-for-ci-cd-pipeline-devsecops-hospital-management-system-owmbg0iof","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,kubernetes,cicd,devsecops,azure-devops","timeRequired":"PT20M","video":{"@type":"VideoObject","name":"Threat Modeling for CI/CD Pipeline | DevSecOps Hospital Management System","description":"A walkthrough of building a threat model for a hospital management CI/CD pipeline using Microsoft Threat Modeling Tool and the STRIDE methodology. The tutorial...","thumbnailUrl":"https://i.ytimg.com/vi/23y1aYsnR9M/sddefault.jpg","uploadDate":"2026-07-09T08:03:53.653Z","duration":"PT20M","url":"https://api.daily.dev/r/OWmBg0iOF","embedUrl":"https://www.youtube.com/embed/23y1aYsnR9M"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"YouTube","item":"https://daily.dev/sources/youtube"},{"@type":"ListItem","position":3,"name":"Threat Modeling for CI/CD Pipeline | DevSecOps Hospital Management System"}]} ```