From my previous post, I mentioned about using the SDL Threat Modeling Tool v3 to identify and mitigate potential security issues early.
You can actually setup the Threat Modeling Tool to use Team Foundation Server as bug tracking system. Here is the instructions:
1. Launch Threat Modeling Tool.
2. Go to Actions, select "Show Bug Tracking Settings"![]()
3. At the "Bug Tracking Settings", enter the uri that point to your Team Foundation Server. ex: http://tfsrtm08:8080
4. For the Product setting, enter the team project name. ex: AWC-Online.
5. For the Issue type setting, enter the work item type. ex: Bug
[ you can also your your own template to add in more values, ex: Priority, Traige]
6. Once you have done, click "OK" to exit the setting dialog.
7. Now you can go ahead to add a bug from your Threat Modeling Tool.
8. Enter the description for the threat, then click "Add Bug". A bug workitem will be created and published to Team Foundation Server.
9. When you go to Team Explorer and bring out all the Active Bugs, you will notice the bug you created is appeared here.![]()