Slack

The Slack integration is an Incoming Webhook URL. There is no OAuth, no Slack app installed by AppArch and no channel picker.

Connecting

1. In Slack open api.slack.com → Create New App → From scratch, pick the Slack workspace, then Features → Incoming Webhooks.
2. Activate webhooks and Add New Webhook to Workspace, choosing the channel. The channel is fixed by the webhook itself.
3. In AppArch open Integrations → Slack and paste the URL. Only URLs starting with https://hooks.slack.com/ are accepted.
4. Optionally type a channel display name - it is shown in the UI only, because AppArch cannot read it from the URL.
5. Verify & connect - AppArch posts a test message to the webhook and saves nothing if Slack rejects it.

Each AppArch workspace has one Slack connection. Connecting again replaces the URL. Managing it requires the workspace’s Integrations permission.

What is stored

• The webhook URL, encrypted (AES-256-GCM) with the installation’s master key. The UI shows only its last four characters.
• The optional channel display name, who connected it and when it was last verified.

Disconnect deletes the encrypted URL.

What is sent

Today AppArch posts only a test message: when you connect, and when you press Test connection. No findings, scan results, summaries or scorecards are sent to Slack.

Notifications that exist today (for example report subscriptions) are delivered by e-mail.

Note

The installation operator can close the Slack integration for every workspace under Administration → Settings → Policies (/management/settings/policies). Microsoft Teams works the same way: an Incoming Webhook URL, used only for a test message.