First you need to create a Slack workflow as follows:
Automations
>Workflows
>+ New Workflow
>Build Workflow
- Name the workflow
SecurityScorecard Slack notification
Start the workflow...
>Choose an event
>From a webhook
Set Up Variables
- Key:
grade
> Data type:Text
- Key:
domain
> Data type:Text
Done
>Continue
- Right-hand menu:
Messages
>Send a message to a channel
Select a channel
drop-down > choose the channel where you want to send the SecurityScorecard gradeAdd a message
>Current SecurityScorecard for
>Insert a variable
> Selectdomain
>: Grade
>Insert a variable
> Selectgrade
>Save
- Click
Finish Up
button to publish the workflow
Then you need to securely store the Slack webhook URL as a GitHub Actions secret:
- Go back to the
... More
>Automations
>Workflows
>Managed by you
screen - Click
SecurityScorecard Slack notification
thenCopy workflow link
button - Go to the
Settings
>Secrets and variables
>Actions
screen on your GitHub repo - Click the
New Repository secret
button - Give it the name
SLACK_WEBHOOK
and paste the webhook URL you copied from Slack - Save the secret
- Now copy
securityscorecard-slack-notification.yml
to your repo's.github/workflows
folder - Replace
github.com
insecurityscorecard-slack-notification.yml
with the domain of your company - Commit the changes
The SecurityScorecard grade of the domain you specified will be posted to the Slack channel you chose above on the first Monday of each month.