OWASP / glue

Application Security Automation
Other
522 stars 112 forks source link

Slack reporter sending message without attachment #173

Open plech-sec opened 4 years ago

plech-sec commented 4 years ago

What ? Slack reporter sending message without attachment.

Using command: sudo docker run --rm -i --mount type=bind,source="$(pwd)",target=/glue/wrk/ owasp-glue ruby bin/glue -f slack --slack-token xoxb-TOKEN --slack-channel owasp-glue-test -t Dynamic -T /glue/wrk/output.json --mapping-file zaproxy --finding-file-path /glue/wrk/glue.json -d

On Slack Channel message :

OWASP Glue test run completed - See attachment.

From console :

Loading scanner... Logfile nil? calling scan Running scanner Mounting ... /glue/wrk/output.json Mounting target: /glue/wrk/output.json Checking about mounting /glue/wrk/output.json with # In Docker mounter, target: /glue/wrk/output.json became: ut.json ... wondering if it matched .docker Checking about mounting /glue/wrk/output.json with # Checking about mounting /glue/wrk/output.json with # Checking about mounting /glue/wrk/output.json with # Processing target.../glue/wrk/output.json Running tasks in stage: wait Running tasks in stage: mount Running tasks in stage: file Running tasks in stage: code code - Dynamic - # Running tasks in stage: live Running tasks in stage: done Starting Contrast Severity Filter Minimum: No minimum found, skipping filter. Have 24 items pre ZAP filter. Have 24 items post ZAP filter. channel=CQRJCQLRH, message=bot_id=BQV5AC325, subtype=bot_message, text=OWASP Glue test run completed - See attachment., ts=1575303887.000200, type=message, username=bot, ok=true, ts=1575303887.000200 owasp-glue

Why is there no attachment in the message? Maybe the command is incorrect?

stale[bot] commented 4 years ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.