Slack alerts for

This article is a followup to my previous post about In short, now that I had mass execution of many endpoints, I now needed to be able to do something with all the command invocation JSON result files laying around.

My goal was to be able to react to each JSON result file output by, analyze the results and basically notify a Slack channel and copy the offending result file off to another location (if vulnerabilities or expiration were found). In and of itself this use-case was pretty common, however I wanted to code something that was a bit more configurable; a generic reactive engine for JSON result files.

The result of this was another daemon that you could drop into a larger pipeline called on github (


This daemon monitors a directory for new JSON result output files, evaluates them using ObjectPath expressions to trigger events which can be reacted to in different ways such as sending Slack alerts, copying JSON result files to a new location or anything else you with do do. You can implement a simple python Reactor with a handleTriggers method and do whatever you want to extend the available functionality.

The entire project is configurable via YAML config files that let you configure the “triggers” that will evaluate the JSON results, then trip one or more “reactors” to do something. (such as send a Slack alert or copy a file). If thats not enough you can easily implement your own “Reactors” to do something else (i.e. throw a message into a Kafka queue or whatever).

The best place to start is to check out the docs at and go from there.

This is currently being used in my use-case to evaluate the results of hundreds of JSON result files generated many times daily which are ultimately produced by I hope you find it useful as well!

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s