the bot should check for security issues with itself

ocd-scm / ocd-chatbot

A botkit chatbot to drive OCD

MIT License

2 stars 1 forks source link

the bot should check for security issues with itself #3

Open simbo1905 opened 5 years ago

simbo1905 commented 5 years ago

github is scanning the latest repo and puts up a warning saying that there are vulnerabilities. we can have a chatbot script that looks to see if there are such warnings and have the bot announce that it might need an upgrade.

simbo1905 commented 5 years ago

I ran:

npm install -g snyk
snyk wizard

This created a .synk file and patched the security warnings. At the moment I am not able to see the ocd-scm org in synk otherwise I am thinking to simply setup monitoring over there. Then again that won't help anyone with a private fork. This ticket needs some more thought about whether it is the right approach or whether there are other approaches that could be taken.