Docs/Integrations/Slack Integration

Slack Integration

Receive DryRun Security alerts and notifications in Slack.

In this section we set up an integration webhook and use it to receive event notifications from DryRun Security. There is a dedicated Slack integration and a Generic webhook option. The configuration steps are identical for both.

Prerequisite: You'll need to have already created a Webhook URL on the system you wish to integrate. Messages sent are JSON-formatted POST requests.

Notification Setup Walkthrough

The Integrations page in the DryRun Security dashboard shows available notification channels.

Notification integrations page in DryRun Security

Slack Integration

Connect DryRun Security to Slack for real-time security alerts.

Slack integration setup

Generic Webhook

Configure a generic webhook to send notifications to any HTTP endpoint.

Generic webhook configuration

Integration Scope

Global integrations notify on findings across all repositories in your organization.

Global integration settings

Targeted integrations notify only for specific repositories.

Targeted integration settings

Risk Level Triggers

Configure which risk levels trigger notifications.

Risk level trigger configuration

Use the test button to validate your notification configuration.

Test notification button

Webhook Format

Example JSON body sent by the generic webhook:

Generic webhook JSON body example

Example of a Slack notification message:

Slack notification message example
Notification configuration overview
List of configured notifications

Configure a Global Integration

A global integration works across all repositories in your organization with no additional configuration required.

  1. Log in to the DryRun Security portal at https://app.dryrun.security.
  2. Navigate to Settings, then click Integrations.
  3. Click Details on the integration card you want to configure.
  4. In the Webhook URL box, add the URL for the target webhook to receive notifications.
  5. Choose a Risk Level. Notifications will be triggered when a change has a risk at or above the chosen level.
  6. Leave Enabled selected.
  7. Leave Global checked.
  8. Click Save.

Once saved, the Test button will be enabled. Click it to send a test message to the Webhook URL to validate the setup.

Configure a Targeted Integration

A targeted integration can be used to receive notifications about one or more specific repositories. It must be assigned to a Configuration.

  1. Follow steps 1–5 above.
  2. Leave Enabled selected.
  3. Uncheck the Global option. A Name box will appear - this name is used to reference the integration in a Configuration.
  4. Click Save, then click Test to validate.

Note: You'll need to add your webhook to a Configuration before notifications will be sent.

Add Notification to a Configuration

  1. Navigate to Settings > Configurations.
  2. Select the Configuration you want to edit.
  3. Toggle on Notifications Enabled.
  4. Select the desired webhook name(s) from the Integrations dropdown.
  5. Click Save.

Changes in the repository that match the integration's risk level will now trigger a notification.