Zenn
Open3

NewRelicのVulnerability Managementを使ってみる

New Relic
observability
u1u1

困ったことにSlack通知がアカウントIDごとに設定できない。
Webhookを受信して自前で振り分けるしかないのかな？

Vulnerability Managementで発行されるWebhookの内容(例)

{
  "issueId": "CVE-1970-451",
  "accountId": 3839056,
  "issueType": "Test Issue",
  "entity": "Service name",
  "detectedAt": "1971-01-01",
  "severity": "INFO",
  "status": "NEW",
  "firstSeen": "1970-01-01",
  "entityType": "Service",
  "description": "This is not a real vulnerability, but an example of how one might look in your system",
  "title": "Testing integration with New Relic",
  "source": "New Relic",
  "issueInstanceKey": "./repo-path/package.json",
  "remediationExists": true
}