Connect Slack, webhooks and GitHub

Send findings, completed scans and retest results where your team already works, and open GitHub issues from any finding.

Only admins can add or remove integrations. Go to Integrations.

Slack

  1. In Slack, create an Incoming Webhook for the channel you want.
  2. In Countermind, choose + Slack, paste the webhook URL and give it a label.
  3. Under Notify on, choose the events, then save.
  4. Choose Send test to check that a message arrives.

Webhook

Countermind sends a JSON POST to your HTTPS endpoint for each event you choose. Add a Signing secret to receive an HMAC-SHA256 signature you can verify.

Payloads and signature checking are described in webhook events.

GitHub issues

  1. In GitHub, create a fine-grained token for the repository with Issues: Read and write.
  2. In Countermind, choose + GitHub issues and enter the repository as owner/repository and the token.
  3. On any finding, choose Open GitHub issue in owner/repository.

The issue gets the severity, impact, description and fix, a security label and a link back to the finding. Countermind also notes the issue in the finding's comments.

Events

EventSent when
A finding is publishedA researcher publishes a new finding to your organization.
A scan completesA scan finishes, with the number of findings published.
A retest result is publishedA researcher publishes the result of a retest.