introduce the --dryrun option to the notify command

[hiboma]

If --dryrun is specified for notify, JSON is output to stdout without slack notification

notify に --dryrun を指定すると、緩やかな通知を行わずに、JSON を標準出力に出力します。

use case

After setting the exclusion in findings, use -dryrun to make sure that slack notifications are also excluded as intended.

findings に除外設定を入れた後に、slack 通知でも意図した通りに除外されているかを確かめるために —dryrun を用います

sample

$ ./control-controls notify controls/base.yml --overlay controls/foo.yml --stdout
{
  "blocks": [
    {
      "text": {
        "text": "*AWS Security Hub Notification*",
        "type": "mrkdwn"
      },
      "type": "section"
    },
    {
      "text": {
        "text": "CRITICALラベルのコントロールが存在します",
        "type": "mrkdwn"
      },
      "type": "section"
    },
    {
      "fields": [
        {
          "text": "*CRITICAL:*\n2",
          "type": "mrkdwn"
        },
        {
          "text": "*HIGH:*\n51",
          "type": "mrkdwn"
        }
      ],
      "type": "section"
    },
    {
      "fields": [
        {
          "text": "*MEDIUM:*\n203",
          "type": "mrkdwn"
        },
        {
          "text": "*LOW:*\n242",
          "type": "mrkdwn"
        }
      ],
      "type": "section"
    },
    {
      "text": {
        "text": "<https://ap-northeast-1.console.aws.amazon.com/securityhub/home?region=ap-northeast-1#/findings?search=*****|View findings>",
        "type": "mrkdwn"
      },
      "type": "section"
    }
  ]
}

[github-actions]

Code Metrics Report

Coverage	Code to Test Ratio	Test Execution Time
31.7%	1:0.4	4s

Code coverage of files in pull request scope (50.4%)

Files	Coverage
cmd/notify.go	0.0%
sechub/notify.go	83.5%

---

Reported by octocov