Skip to main content
Alerting configuration in Settings
When a run’s assertions fail, Garnet can notify your team automatically — on your pull request, in Slack, or via a custom webhook. Configure alerts from Settings → Alerting.

​
GitHub PR comments

Get security feedback directly on your pull requests. When the Garnet agent runs during a pull_request-triggered workflow, results are posted as a PR comment.

​
When assertions fail

GitHub PR comment showing security issues detected
The comment shows a Security Issues Detected table with:
ColumnDescription
Domain/IPThe flagged destination
StateWhether the connection was blocked or detected
PrioritySeverity level (critical, high, low)
DetectedWhen the issue was first seen
LinkDirect link to the full run details in the Garnet dashboard

​
When all assertions pass

GitHub PR comment confirming no security issues
A green No Security Issues Detected comment confirms the run was clean, giving your team confidence to merge.

​
Setup

  1. Install the Garnet Platform App on your GitHub repositories.
  2. In Garnet, go to Settings → Alerting → confirm GitHub PR Comments shows “App Installed” and “Comments On”.
PR comments only appear for workflows triggered by pull_request events. Other triggers still generate runs in the dashboard but won’t produce PR comments.

​
Slack notifications

Slack alert showing a detection
Receive alerts in Slack when assertions fail. Each notification includes:
  • Policy — The assertion that failed
  • Destination — The flagged domain and port/protocol
  • Source — Runner, workflow, and user context
  • Alert ID — Unique identifier for tracking
  • View in Console — Direct link to the run in the Garnet dashboard

​
Setup

  1. Create a Slack Incoming Webhook:
    • Create a new Slack app and select your workspace
    • Go to Incoming Webhooks → toggle On
    • Click Add New Webhook to Workspace, select your channel, authorize
    • Copy the Webhook URL (starts with https://hooks.slack.com/...)
  2. In Garnet, go to Settings → Alerting → Add Webhook and paste your Slack URL.
Webhook configuration

​
API tokens

API token management
Manage API tokens from Settings → API Tokens. Tokens authenticate your agents with the Garnet platform.
  • Create Token — Generate a new token for agent deployment
  • View / Copy — Reveal or copy an existing token value
  • Delete — Revoke a token (agents using it will stop reporting)
Store tokens securely. Use GitHub repository secrets or Kubernetes secrets — never commit tokens in code or logs.

​
Next steps

  • Runs — View runtime profiles and assertion results
  • Agents — Manage your agent fleet
  • Quick Start — Set up your first agent