You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
-**OSV Feed Integration**: Fetches malicious package data from Google Cloud Storage OSV vulnerability database
16
48
-**JFrog Artifactory Search**: Searches for packages in your Artifactory repositories using AQL (Artifactory Query Language)
17
49
-**Security Cross-Reference**: Compares OSV malicious packages against your JFrog repositories to identify potential threats
18
50
-**Package Blocking**: Block malicious packages using JFrog Artifactory exclusion patterns to prevent downloads
19
51
-**Package Management**: View, block, and unblock packages with enterprise-grade safety features
52
+
-**Notifications & Alerts**: Configurable notifications via webhook, or Microsoft Teams when malicious packages are detected
20
53
-**Time-Based Filtering**: Configurable time window for fetching recent malicious packages (default: 48 hours)
21
54
-**Rich CLI Interface**: Interactive command-line interface with progress bars and formatted output
22
55
-**Comprehensive Health Checks**: Validates connectivity to OSV and JFrog services
@@ -370,7 +403,21 @@ storage_service:
370
403
enabled: true
371
404
```
372
405
373
-
## � Sample Output
406
+
## 📢 Notifications
407
+
408
+
Malifiscan supports configurable notifications to alert your team when malicious packages are detected. Test your notification configuration with built-in testing commands that support both basic connectivity checks and realistic malicious package simulations.
409
+
410
+
```bash
411
+
# Test basic notification functionality
412
+
uv run python cli.py notifications check
413
+
414
+
# Test with realistic malicious package payload
415
+
uv run python cli.py notifications check --malicious
416
+
```
417
+
418
+
Configure webhook, or Microsoft Teams integration through the notification service settings in your configuration files.
0 commit comments