{"id":19048860,"url":"https://github.com/brayanhenao/cve-notifications-app","last_synced_at":"2026-05-04T14:42:30.825Z","repository":{"id":97150024,"uuid":"399255972","full_name":"brayanhenao/cve-notifications-app","owner":"brayanhenao","description":"It is an application that monitors new CVEs that are announced for the dependencies that are being tracked and notify them via Slack Webhook message to a specific channel.","archived":false,"fork":false,"pushed_at":"2023-02-25T02:40:43.000Z","size":41,"stargazers_count":1,"open_issues_count":1,"forks_count":1,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-05-26T15:04:46.381Z","etag":null,"topics":["cve","go","slack"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/brayanhenao.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-08-23T21:46:35.000Z","updated_at":"2021-11-19T19:08:27.000Z","dependencies_parsed_at":null,"dependency_job_id":"7bd39351-4b8c-4a5f-bcbb-e03388434f34","html_url":"https://github.com/brayanhenao/cve-notifications-app","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/brayanhenao/cve-notifications-app","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/brayanhenao%2Fcve-notifications-app","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/brayanhenao%2Fcve-notifications-app/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/brayanhenao%2Fcve-notifications-app/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/brayanhenao%2Fcve-notifications-app/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/brayanhenao","download_url":"https://codeload.github.com/brayanhenao/cve-notifications-app/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/brayanhenao%2Fcve-notifications-app/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32612318,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-04T10:08:07.713Z","status":"ssl_error","status_checked_at":"2026-05-04T10:08:02.005Z","response_time":58,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cve","go","slack"],"created_at":"2024-11-08T23:09:01.903Z","updated_at":"2026-05-04T14:42:30.792Z","avatar_url":"https://github.com/brayanhenao.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# CVEs notification app\n\n## Introduction\n\nIt is an application that monitors new CVEs that are announced for the dependencies that are being tracked.\n\nThe notifications are sent via Slack Webhook message to a specific channel.\n\nIt is built with:\n\n* Golang.\n* GithubActions as CI.\n* [Memongo](https://github.com/tryvium-travels/memongo) for in-memory database testing.\n* [Afero](https://github.com/spf13/afero), a filesystem framework.\n\nThis application will use\nthe [NVD Nist API](https://csrc.nist.gov/CSRC/media/Projects/National-Vulnerability-Database/documents/web%20service%20documentation/Automation%20Support%20for%20CVE%20Retrieval.pdf)\nto obtain the CVEs, performing a search using the CPE (Common Platform Enumeration) of each dependency.\n\n## Core functionalities\n\n#### Fill DB\n\nThis application uses a database (MongoDB) in which the information of all the CVEs of the dependencies that are known\nat the moment are stored. The ID, Vendor, Product, Severity, and Description are stored.\n\n#### Find new CVEs\n\nThrough a scheduled [Cron (Every 2 hours)](.github/workflows/find-new-cves.yml), it will search for new CVEs that are\nnot in the database. If a new CVE is found, it is notified via a slack Webhook in the channel provided by environment\nvariable.\n\n![Screen Shot 2021-08-12 at 10 20 03 AM](https://user-images.githubusercontent.com/17348387/129213392-f9c14e4f-6fca-430d-b979-0555fb8360e4.png)\n\n#### Update tracked dependencies\n\nAll the dependencies that this app will be monitoring will be stored in a CSV file called\n`dependencies.csv`. This Workflow will run every time the file is modified, either a new dependency is added (to add the\nnew CVEs) or the file is deleted (to remove the CVEs from the database).\n\n## Setup\n\n#### Slack App\n\nThis application requires a Slack App with the corresponding _**write**_ permissions to the channel that you want to\ninform about new CVEs.\n\nOnce the application is created, go to `Incoming Webhooks` and add a new webhook to your workspace. It generates a link\nthat will be used in the next step.\n\n### Environment Variables\n\nThis application requires 2 environment variables to be configured:\n\n* **DB_URI**  : The MongoDB database connection URI.\n* **SLACK_WEBHOOK_URL**  : Previously generated Slack Webhook URL.","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbrayanhenao%2Fcve-notifications-app","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fbrayanhenao%2Fcve-notifications-app","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbrayanhenao%2Fcve-notifications-app/lists"}