Get notified on slack when a Dependabot security alert is generated on github

→

GitHub is a web-based hosting service for version control using Git, offering all of the distributed version control and source code management functionality.Slack is a messaging app for teams. It brings all your team's communication and files in one place, where they're instantly searchable and available wherever you go.

But did you know that using our github integration, you can specifically be notified when a Dependabot security alert is generated, via slack? Here's how you can get started.

Step 1: Setup github

PUT

/integrations/github

Schema Type: "object"

Required Fields:

webhook_signing_secret

Properties

webhook_signing_secret "string"

required

The signing secret to verify incoming requests from Github

Example Request

{
  "webhook_signing_secret": "whsec_e5cf4458caae49ae72d8f275deb9b63bdd41dd5c932c27c9346d428fb9e1d0a0"
}

Step 2: Setup slack

PUT

/integrations/slack

Schema Type: "object"

Required Fields:

app_idclient_idclient_secretsigning_secret

Properties

client_id "string"

required

The Slack client ID that can be found in the app's settings page of the Slack API dashboard.

client_secret "string"

required

The Slack client secret that can be found in the app's settings page of the Slack API dashboard.

signing_secret "string"

required

The Slack signing secret that can be found in the app's settings page of the Slack API dashboard.

app_id "string"

required

The Slack app ID that can be found in the app's settings page of the Slack API dashboard.

Example Request

{
  "app_id": "12345678901",
  "client_id": "1.0",
  "client_secret": "12345678901234567890123456789012",
  "signing_secret": "12345678901234567890123456789012"
}