Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

345 failed to invoke alert after latest upgrade #346

Merged
merged 8 commits into from
Dec 3, 2024
Merged

345 failed to invoke alert after latest upgrade #346

Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
28a7418
Add conditional IoC handling in alert creation process
taylorwalton Dec 3, 2024
99830d4
push lab build
taylorwalton Dec 3, 2024
1ff3c00
Enable Discord notifications for Docker image updates in CI workflow
taylorwalton Dec 3, 2024
29acccf
Update Docker workflow to use 'main' branch and 'latest' tags for bac…
taylorwalton Dec 3, 2024
b5f9fa5
Update docker.yml
taylorwalton Dec 3, 2024
e631219
Update Docker workflow to trigger on 'main' branch
taylorwalton Dec 3, 2024
d0f6e98
Update Docker workflow to trigger on '345-failed-to-invoke-alert-afte…
taylorwalton Dec 3, 2024
89f61ca
Update docker.yml
taylorwalton Dec 3, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 6 additions & 1 deletion backend/app/incidents/services/incident_alert.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -846,7 +846,12 @@ async def create_alert(
existing_alert,
)
await add_asset_to_copilot_alert(alert_payload, existing_alert, customer_code, session)
await add_ioc_to_copilot_alert(alert_payload, existing_alert, customer_code, session)
# If the alert has an IoC, add it to the alert
if alert_payload.ioc_payload is not None:
logger.info(f"Adding IoC to alert {existing_alert}")
await add_ioc_to_copilot_alert(alert_payload, existing_alert, customer_code, session)
else:
logger.info(f"No IoC found for alert {existing_alert}")
return existing_alert
return await create_alert_full(alert_payload, customer_code, session)

Expand Down
Loading