Skip to main content

​
Overview

ZeroPath integrates with Slack to send scan completion notifications and vulnerability alerts to your team’s channels. Configure which events trigger notifications and set score thresholds to control noise.

​
Setup

  1. Navigate to Settings → Integrations in the ZeroPath dashboard.
  2. Click “Connect Slack”.
  3. Authorize ZeroPath in the Slack consent screen.
  4. Select the channels you want to receive notifications.
The ZeroPath bot automatically joins public channels you select. For private channels, you’ll need to manually invite the ZeroPath bot.

​
Notification Types

Each notification group can be configured with these notification triggers:

​
Notification Format

New-vulnerability notifications display a rich card for each finding, including:
  • Title — linked directly to the finding in the ZeroPath app
  • Severity — emoji badge with score (e.g., Critical 92)
  • Status — current finding status (Open, Patched, False Positive, etc.)
  • Affected file — the file and line number where the vulnerability was found
  • Pull request — the PR that triggered the scan, for PR scan notifications
  • Introduced by — the git-blame author who introduced the vulnerable lines, when available
  • Description excerpt — a short summary of the finding
  • Triage button — a one-click link to triage the finding in ZeroPath
Up to five findings are shown per message, sorted by severity. When more findings exist than fit in a single message, a trailing link is included to view the full scan results.

​
Score Threshold

Set a vulnerability score threshold (0–100) to filter notifications. Only findings with a score at or above the threshold are included in the notification message. This prevents low-severity noise from flooding your channels.

​
Channel Configuration

You can create multiple notification groups, each targeting different Slack channels with different settings. For example:
  • #security-critical — Full scans only, threshold 80 (Critical/High findings only)
  • #dev-notifications — All scans, threshold 0 (all findings)
  • #pr-reviews — PR scans only, only new vulnerabilities

​
Managing Notification Groups

Select the Slack integration from the sidebar in Settings → Integrations to manage notification groups directly in the detail panel:
  • Create a group — Click “New Notification Group”, configure channels, thresholds, and notification types, then save.
  • Edit a group — Select an existing group to modify its settings inline.
  • Delete a group — Remove a notification group and all its channel memberships.
  • Add channels — Select from the list of public and private channels in your workspace. You can search channels by name to quickly find the one you need. Channels are listed alphabetically.
  • Remove channels — The ZeroPath bot automatically leaves removed channels.
When editing a notification group, ZeroPath validates that previously saved channels still exist. If any channels have been archived, deleted, or the bot has been removed from them, you will see a warning and those channels are automatically removed from the selection. You can then save the group to persist the updated channel list.

​
Troubleshooting

Not receiving notifications
  • Check that the notification group is configured for the correct scan type.
  • Verify the score threshold isn’t filtering out all findings.
  • For private channels, ensure the ZeroPath bot has been invited.
“Slack integration not found”
  • Reconnect the integration from Settings → Integrations.