-
Notifications
You must be signed in to change notification settings - Fork 29
Description
Describe the bug
The Repository Vulnerability Webhook is deprecated. Although it doesn't seem to have happened yet, the webhook was/is planned to be removed in 2023: https://github.blog/changelog/2022-10-06-new-dependabot-alerts-webhook
There is a new "Dependabot Alert" webhook that replaces the old Repository Vulnerability Alert hook. The app should be updated to support this new webhook. Currently, the data doesn't show up in the dashboards. The records that come into Splunk get tagged with CodeScanning as the eventtype and there are new actions that should be supported as well with this new hook:

To Reproduce
Steps to reproduce the behavior:
- Configure GitHub to send Dependabot Alert webhooks to Splunk
- See that they are not shown in the dependabot dashboards
Expected behavior
The app should support the Dependabot alert webhook in place of the repository vulnerability alerts hook.
Screenshots
N/A
Desktop (please complete the following information):
- OS: Mac Ventura 13.6.1
- Browser: Chrome
- Version: App version 1.3.2
Additional context
N/A