[FEATURE] Immutable asset numbers

[chgerkens]

Describe the feature

When a new asset is created, numbers of existing assets should not be updated in assets table so that numbers can be used to refer to an asset outside the threat composer model.

Use Case

Adding assets to a diagram by using its number only.

Example Diagram

Proposed Solution

No response

Other Information

No response

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

[chgerkens]

Could be labeled as a bug, since threat numbers for instances to not change when new threats are added.

[jessieweiyi]

Hi @chgerkens ,

Thank you for your feature request and your interest in Threat Composer. Let me explain the current behavior: Asset Ids are dynamically generated during threat model report creation, based on how they appear within the threats. This means the IDs may change when threats are added, deleted, or modified.

While we've added your request to our product backlog, there are a few technical challenges to consider:

• Implementing this change would require breaking changes to our schema
• This could impact dependent downstream applications
• We need to carefully evaluate how to maintain compatibility with:
  • ThreatsOnly mode (which expects an array of threats)
  • EditorOnly mode (which expects a single threat)

We'll continue to evaluate this request and provide updates here. Please feel free to follow this issue for any developments.

Thanks for helping us improve Threat Composer!