Merge pull request #5 from ncode/juliano/slack

Migrate from mattermost to slack notification and small test update

Author: ncode

README.md

@@ -14,7 +14,7 @@
 - **Supports Multiple Operations**: Filters common Vault operations, including KV operations, metadata updates, and deletion events.
 - **Performance-Oriented**: Built with `gnet` to handle high concurrency.
 - **Flexible Forwarding**: Forward filtered audit logs to specified UDP addresses for further processing or monitoring.
-- **Messaging Integration**: Send notifications about matched audit logs to messaging platforms like Mattermost.
+- **Messaging Integration**: Send notifications about matched audit logs to messaging platforms like Slack.
 
 ## Table of Contents
 
@@ -81,8 +81,8 @@ Once you have built the project, you can run the `vault-audit-filter` executable
           enabled: true
           address: "127.0.0.1:9001"
         messaging:
-          type: "mattermost_webhook"
-          webhook_url: "https://your-mattermost-instance.com/hooks/your-webhook-id"
+          type: "slack_webhook"
+          webhook_url: "https://your-slack-instance.com/hooks/your-webhook-id"
 
       - name: "critical_events"
         rules:
@@ -98,8 +98,8 @@ Once you have built the project, you can run the `vault-audit-filter` executable
           enabled: true
           address: "127.0.0.1:9002"
         messaging:
-          type: "mattermost"
-          url: "https://your-mattermost-instance.com"
+          type: "slack"
+          url: "https://slack.com/api/"
           token: "your-bot-token"
           channel: "your-channel-id"
 
@@ -122,11 +122,11 @@ Once you have built the project, you can run the `vault-audit-filter` executable
   - `log_file.compress`: Whether to compress the old log files.
   - `forwarding.enabled`: Whether to enable forwarding for this rule group.
   - `forwarding.address`: The UDP address to forward matching audit logs to.
-  - `messaging.type`: The type of messaging integration ("mattermost" or "mattermost_webhook").
-  - `messaging.webhook_url`: The webhook URL for Mattermost (when using "mattermost_webhook" type).
-  - `messaging.url`: The Mattermost server URL (when using "mattermost" type).
-  - `messaging.token`: The bot token for Mattermost (when using "mattermost" type).
-  - `messaging.channel`: The channel ID for Mattermost messages (when using "mattermost" type).
+  - `messaging.type`: The type of messaging integration ("slack" or "slack_webhook").
+  - `messaging.webhook_url`: The webhook URL for Slack (when using "slack_webhook" type).
+  - `messaging.url`: The Slack API base URL (when using "slack" type).
+  - `messaging.token`: The bot token for Slack (when using "slack" type).
+  - `messaging.channel`: The channel ID for Slack messages (when using "slack" type).
 
 ### Rule Syntax
 

go.mod

@@ -6,30 +6,22 @@ require (
 	github.com/bytedance/sonic v1.13.2
 	github.com/expr-lang/expr v1.16.9
 	github.com/hashicorp/vault/api v1.14.0
-	github.com/mattermost/mattermost-server/v6 v6.7.2
 	github.com/panjf2000/gnet v1.6.7
+	github.com/slack-go/slack v0.16.0
 	github.com/spf13/cobra v1.8.0
 	github.com/spf13/viper v1.18.2
-	github.com/stretchr/testify v1.8.4
+	github.com/stretchr/testify v1.10.0
 	gopkg.in/natefinch/lumberjack.v2 v2.0.0
 )
 
 require (
-	github.com/blang/semver v3.5.1+incompatible // indirect
 	github.com/bytedance/sonic/loader v0.2.4 // indirect
 	github.com/cenkalti/backoff/v3 v3.0.0 // indirect
 	github.com/cloudwego/base64x v0.1.5 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
-	github.com/dustin/go-humanize v1.0.0 // indirect
-	github.com/dyatlov/go-opengraph v0.0.0-20210112100619-dae8665a5b09 // indirect
-	github.com/francoispqt/gojay v1.2.13 // indirect
 	github.com/fsnotify/fsnotify v1.7.0 // indirect
-	github.com/go-asn1-ber/asn1-ber v1.5.3 // indirect
 	github.com/go-jose/go-jose/v4 v4.0.1 // indirect
-	github.com/go-test/deep v1.0.4 // indirect
-	github.com/google/uuid v1.4.0 // indirect
-	github.com/gorilla/websocket v1.5.0 // indirect
-	github.com/graph-gophers/graphql-go v1.3.0 // indirect
+	github.com/gorilla/websocket v1.5.3 // indirect
 	github.com/hashicorp/errwrap v1.1.0 // indirect
 	github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
 	github.com/hashicorp/go-multierror v1.1.1 // indirect
@@ -40,45 +32,23 @@ require (
 	github.com/hashicorp/go-sockaddr v1.0.2 // indirect
 	github.com/hashicorp/hcl v1.0.0 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
-	github.com/json-iterator/go v1.1.12 // indirect
-	github.com/klauspost/compress v1.17.0 // indirect
 	github.com/klauspost/cpuid/v2 v2.0.12 // indirect
 	github.com/magiconair/properties v1.8.7 // indirect
-	github.com/mattermost/go-i18n v1.11.1-0.20211013152124-5c415071e404 // indirect
-	github.com/mattermost/ldap v0.0.0-20201202150706-ee0e6284187d // indirect
-	github.com/mattermost/logr/v2 v2.0.15 // indirect
-	github.com/minio/md5-simd v1.1.2 // indirect
-	github.com/minio/minio-go/v7 v7.0.24 // indirect
-	github.com/minio/sha256-simd v1.0.0 // indirect
 	github.com/mitchellh/go-homedir v1.1.0 // indirect
 	github.com/mitchellh/mapstructure v1.5.0 // indirect
-	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
-	github.com/modern-go/reflect2 v1.0.2 // indirect
-	github.com/opentracing/opentracing-go v1.2.0 // indirect
-	github.com/pborman/uuid v1.2.1 // indirect
-	github.com/pelletier/go-toml v1.9.4 // indirect
 	github.com/pelletier/go-toml/v2 v2.1.0 // indirect
-	github.com/philhofer/fwd v1.1.1 // indirect
-	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
-	github.com/rs/xid v1.4.0 // indirect
 	github.com/ryanuber/go-glob v1.0.0 // indirect
 	github.com/sagikazarmark/locafero v0.4.0 // indirect
 	github.com/sagikazarmark/slog-shim v0.1.0 // indirect
-	github.com/sirupsen/logrus v1.8.1 // indirect
 	github.com/sourcegraph/conc v0.3.0 // indirect
 	github.com/spf13/afero v1.11.0 // indirect
 	github.com/spf13/cast v1.6.0 // indirect
 	github.com/spf13/pflag v1.0.5 // indirect
-	github.com/stretchr/objx v0.5.0 // indirect
+	github.com/stretchr/objx v0.5.2 // indirect
 	github.com/subosito/gotenv v1.6.0 // indirect
-	github.com/tinylib/msgp v1.1.6 // indirect
 	github.com/twitchyliquid64/golang-asm v0.15.1 // indirect
 	github.com/valyala/bytebufferpool v1.0.0 // indirect
-	github.com/vmihailenco/msgpack/v5 v5.3.5 // indirect
-	github.com/vmihailenco/tagparser/v2 v2.0.0 // indirect
-	github.com/wiggin77/merror v1.0.3 // indirect
-	github.com/wiggin77/srslog v1.0.1 // indirect
 	go.uber.org/atomic v1.9.0 // indirect
 	go.uber.org/multierr v1.9.0 // indirect
 	go.uber.org/zap v1.21.0 // indirect