Use this bot to monitor new CVEs containing defined keywords and send alerts to Slack and/or Telegram.
Configuring AlertBot that notifies you about the new CVEs containing specific keywords is very easy!
-
Fork this repo
-
Modify the file
config/alertbot.yamland set your own keywords -
In the github secrets of your forked repo enter the following API keys:
- VULNERS_API_KEY: (Optional) This is used to find publicly available exploits. You can use a Free API Key.
- SLACK_WEBHOOK: (Optional) Set the slack webhook to send messages to your slack group
- DISCORD_WEBHOOK_URL: (Optional) Set the discord webhook to send messages to your discord channel
- TELEGRAM_BOT_TOKEN and TELEGRAM_CHAT_ID: (Optional) Your Telegram bot token and the chat_id to send the messages to
- PUSHOVER_DEVICE_NAME PUSHOVER_USER_KEY PUSHOVER_TOKEN: (Optional) Set your key and token to receive pushover notifications.
- NTFY_URL: (Optional) Set the URL to send the notifications to ntfy server.
- NTFY_TOPIC: (Optional) Set the topic to send the notifications to ntfy server.
- NTFY_AUTH: (Optional) Set the auth token for the ntfy server.
-
Check
.github/workflows/alertbot.yamland configure the cron (once every 8 hours by default)
Note that the slack, telegram, discord and ntfy.sh configurations are optional, but if you don't set any of them you won't receive any notifications anywhere