intigriti-slack-announce-fork'd

Go bot that publishes any new intigriti submission titles to Slack.

This is a fork of https://github.com/hazcod/intigriti-slack-announce

Changes:

1. Publishes reports as soon as they hit the triage queue
2. State is removed from the config file findings list, no way to persist the file in k8s pods between deployments.
3. Will only publish reports with CreatedDate after application start up, all posted reports kept in-memory.

Setup

1. Download the latest isa release.
2. Create a Slack app, create a Slack incoming Webhook and add chat:write permissions.
3. Retrieve your intigriti API token and pass your (external) IP address for whitelisting.
4. Create your configuration file:

# how often to check in minutes
check_interval_minutes: 15

# your slack webhook
slack_url: "https://hooks.slack.com/services/T00000000/B00000000/XXXXXXXXXXXXXXXXXXXXXXXX"

# your intigriti API credentials
intigriti_client_id: "XXXXXXXXXXX"
intigriti_client_secret: "XXXXXXXXXXX"

5. Run isa (preferably as a service) with arguments:

./isa -conf=my-conf.yaml

3. See new intigriti findings roll in on your Slack channel. Any findings already sent to your Slack channel will be added to your YAML configuration file for portability.

Building

This requires make and go to be installed. Just run make.

Customizing the Slack message

The Slack BlockKit Builder can be used to replace slack/message.go.