Sorry guys a bit late.. was in discussion with another team member.

m https://blogs.vmware.com/opensource/2019/01/22/precaution-open-source-github-app/

The quick link to Bryon's initial threat model in markdown.https://github.com/bnevis-i/security-secret-store/blob/a07b503b4c5b552ffd030d504aa0078eada35eb6/doc/threat-model/threat_model.md

Better link is https://github.com/bnevis-i/security-secret-store/pull/1/files

and lick on View file

otherwise you get a version of the readme.md frozen in time.