Dmitry Ratushny (https://unsplash.com/@ratushny)

Using Huginn to stay on top of things

Huginn (https://github.com/huginn/huginn) is a great automation tool. I use it to get notifications when there any new CVE for products I use.

My Scenario looks like this:

I want to be informed via Telegram if there any new CVEs on CXF, Karaf & Camel.

Send to Telegram

Sending data to Telegram is straight forward, as there is already an agent available: https://huginnio.herokuapp.com/agents#TelegramAgent

You just have to configure Auth Token & Chat ID.

Web scraping using WebsiteAgent

Checking for new CVEs involves a bit more work. What I ended up doing is to check for an update in case a specific element of a website changes. I do this for the first row of the table, listing the latest CVEs. (This approach, of course, has its limitations when more than one entry is added within 30 minutes)

The code looks like this:

{
  "expected_update_period_in_days": "1",
  "url": "https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=camel",
  "type": "html",
  "mode": "on_change",
  "extract": {
    "text": {
      "css": "//#TableWithRules/table/tr[2]/td[1]",
      "value": "normalize-space(.)"
    }
  }
}