Slack

slack

StackHawk’s official Slack integration.

Overview

The StackHawk Slack integration will notify your Slack workspace with notifications whenever HawkScan is run and completes, reporting the findings as it goes. The integration is an oauth 2.0 integration that enables a Slack workspace to communicate with StackHawk.

Features

  • Users will get notifications when HawkScan runs and when it completes.
  • On a successful scan, users will see a summary of findings with a link to the StackHawk web app to view the full results.
  • On scan failures, users will see a link that points to the stacktrace and error conditions.

Requirements

StackHawk:

  • You must have a StackHawk account.

Slack:

  • You must be currently signed in or able to login to the Slack workspace you wish to add the integration to.
  • You must have sufficient permissions to install Slack Apps in your workspace.

Scopes

With this integration you authorize StackHawk with the following Slack scopes:

  • View basic information about public channels in the workspace
  • View basic information about private channels that StackHawk has been added to
  • Send messages as @stackhawk
  • Send messages to channels @stackhawk isn’t a member of

Setup

Click here to authorize and configure the Slack Integration

  1. Log into the StackHawk web app
  2. Visit the Slack Integration page in StackHawk
  3. Click the Install StackHawk for Slack button. This will open in a new tab where you will authorize Slack with the given scopes. You must complete the authorization within an hour before the link expires.
  4. Once Authorized, the Slack Integration is complete! It can now be configured.

Configuration

Once authorized, the integration can be configured in the same screen. Select which workspace channel you want your Slack notifications going to.

  • The Slack integration configuration is assigned per-channel. For each connected Slack Channel, you can specify which Applications and which Environments will send notifications when scanned.

  • By default, if no Applications are selected for the channel configuration, Slack notifications will be sent for All Applications when scanned. The same is true for selected environments.

  • Each Slack channel configuration can be individually edited or removed with the vertical ellipsis ⋮ to the right of the row of the Slack channel.

  • To send Slack notifications to a private channel, you will additionally need to first invite the @stackhawk bot user to that channel. You can do this by sending a message in the private channel mentioning @stackhawk , or within the channel member list controls. Once invited, the private channel will appear in the channel select configuration dropdown. Similarly, if you change a public channel to private, you will need to invite the StackHawk bot user into that Slack Channel for it to continue to send notifications to that channel.

Feedback

Have any suggestions, feature requests, or feedback to share? drop us a line at support@stackhawk.com