Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add Slack security alerts for DataHub #128

Merged
merged 10 commits into from
May 31, 2024

Conversation

tom-webber
Copy link
Contributor

@tom-webber tom-webber commented May 28, 2024

add workflow that:

  • fetches DataHub security advisories via GitHub CLI
  • parses the response for any matching our version (since the last run of the workflow)
  • posts any matching advisories (or any advisories with unparsable vulnerable versions) to Slack
    • add a warning at the top of the message if high or critical severity alerts contained in the message

add python script for parsing advisories json and outputting slack-formatted message, with tests

…ng our version, then post to slack

add python script for parsing advisories json and outputting slack-formatted message
Co-authored-by: Murdo <109604278+murdo-moj@users.noreply.github.com>
@tom-webber tom-webber linked an issue May 29, 2024 that may be closed by this pull request
MatMoore
MatMoore previously approved these changes May 30, 2024
rename `minimal_version` to `current_version`
Copy link
Contributor

@hjribeiro-moj hjribeiro-moj left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@tom-webber tom-webber merged commit 2ec6f5a into main May 31, 2024
2 of 3 checks passed
@tom-webber tom-webber deleted the add-slack-security-alert-datahub branch May 31, 2024 10:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

DevSecOps for DataHub and find-moj-data
4 participants