Slack and Teams

Deliver review and scan events to collaboration channels

Workspace owners install Slack or Microsoft Teams from the integrations page. The hosted OAuth flow validates state, permits only configured redirect URIs, and stores provider credentials in GCP Secret Manager or Vault.

Slack supports channel messages and thread replies. Teams supports channel messages and replies through Microsoft Graph. Map repository and severity policy to the destination channel; do not send raw source or secret-bearing receipts.

The integration worker uses durable delivery records, bounded retries, and idempotency. Permanent authorization errors stop retrying and appear in the admin integration-health surface.