Repository navigation
task: Send notifications for new GitHub Security Alerts #284
Description
Overview
We want to receive notifications when there are new Alerts in GitHub Security Overview (e.g. new vulnerable components detected). Notifications should be sent either via GitHub Notifications systems to members of @platform-mesh/security or send to a dedicated Zulip channel.
Implementation Details
Likely configuration change on GitHub.
Completion Checklist
- Code implemented and tested
- Documentation updated
- Changes reviewed
Metadata
Metadata
Assignees
Labels
No labels
Activity
mirzakopic commentedon May 5, 2026
Yes lets send this to our zulip channel, i would like the whole team there to have a look at incoming (potential issues)
xmudrii commentedon May 18, 2026
Zulip's GitHub integration doesn't support receiving events that are type of:
code_scanning_alert,dependabot_alert, andsecret_scanning_alert. Supported events are documented at their website and we confirmed with them directly that these events are not supported. That means that using Zulip's GitHub integration is not an option until they eventually add these events as supported.They advised us to try GitHub Actions for this and attempt for that has been made in platform-mesh/.github#167
xmudrii commentedon Jun 5, 2026
This has been fully implemented via platform-mesh/.github#167
We have a daily GitHub Action run that will gather results and post them on a private Zulip channel.