l3montree-dev / l3montree-dev/devguard
Custom webhooks do not fire on new SBOM events / new vulns untested
Open
@Dboy0ZDev is already working on this.
Since Aug 5, 2026.
bug
component/devguard-api
priority:high
- Dominant language
- Go
- Stars
- 161
- Forks
- 43
- Avg merge
- 1d 8h
- Merged PRs (30d)
- 37
Description
https://docs.devguard.org/how-to-guides/integrations/webhook-events/#webhook-events
Describes how custom webhooks can be added to a Project using http requests.
It's possible to add a webhook this way and the test is successful.
To test the integration I removed all SBOMs and artifacts from the project, then triggered a container Scan.
->
- Artifacts and associated vulns are removed from the dashboard upon artifact deletion
- They reappear after the container scan
- webhook does not send anything to the configured target
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.