ekdevdes / audit-bot Goto Github PK

Take data from API calls to audit providers and format it inside of a PDF

Acceptance criteria

• Create PDF with audit data
• PDF generated should be named after pull request

More info can be found in the wiki: https://github.com/ekdevdes/audit-bot/wiki

Make async requests to all third parties to gather audit report data

Acceptance criteria:

• Make request to third parties for audit data and gather response
• Should contain data from all third party audit providers

More info here:
https://github.com/ekdevdes/audit-bot/wiki/Functionality

Sometimes the security reporting fails with this text "observatory [WARN] retrying in 1 second (attempt 1/10)" attempts to retry but the app throws an error before it can retry because its expecting JSON of the successful test.

Add Slack integration to alert team members when an audit fails or comes back with poor results

Acceptance criteria:

• Integrate with slack
• Send notification to channel when an audit fails or comes back with poor results

This will need to integrate with the GitHub API so that we can run an audit report when a pull request is opened to a given branch.

Acceptance criteria:

• Executes callback when a pull request is made to a given branch
• Application is authenticated with GitHub API to get repo data from our users

Allow user to configure custom rules for audits.

Acceptance criteria:

• User can decide based off of the result given from the audit if the PR should pass or fail
• User can set custom rules to decide if the PR should fail or not

More details for how rules will work can be found here:
https://github.com/ekdevdes/audit-bot/wiki/General-Notes