Mitre ATT&CK aligned approach to thread modelling CI/CD environments

https://github.com/rung/threat-matrix-cicd

Threat Modelling S3

https://github.com/trustoncloud/threatmodel-for-aws-s3

STIX's threat actor capability definitions. Useful to calibrate your threat model against.

https://docs.oasis-open.org/cti/stix/v2.1/csprd01/stix-v2.1-csprd01.html#_Toc16070817

Visual tool for building threat models

https://online.visual-paradigm.com/diagrams/features/threat-modeling-tool/

FIRST's guide to threat modeling

https://www.first.org/global/sigs/cti/curriculum/threat-modelling