Connect Slack, webhooks and GitHub
Send findings, completed scans and retest results where your team already works, and open GitHub issues from any finding.
Only admins can add or remove integrations. Go to Integrations.
Slack
- In Slack, create an Incoming Webhook for the channel you want.
- In Countermind, choose + Slack, paste the webhook URL and give it a label.
- Under Notify on, choose the events, then save.
- Choose Send test to check that a message arrives.
Webhook
Countermind sends a JSON POST to your HTTPS endpoint for each event you choose. Add a Signing secret to receive an HMAC-SHA256 signature you can verify.
Payloads and signature checking are described in webhook events.
GitHub issues
- In GitHub, create a fine-grained token for the repository with Issues: Read and write.
- In Countermind, choose + GitHub issues and enter the repository as
owner/repositoryand the token. - On any finding, choose Open GitHub issue in owner/repository.
The issue gets the severity, impact, description and fix, a security label and a link back to the finding. Countermind also notes the issue in the finding's comments.
Events
| Event | Sent when |
|---|---|
| A finding is published | A researcher publishes a new finding to your organization. |
| A scan completes | A scan finishes, with the number of findings published. |
| A retest result is published | A researcher publishes the result of a retest. |