Run AI Command with HARPA AI API on New Medium Risk Finding from Detectify API

Pipedream makes it easy to connect APIs for HARPA AI, Detectify and 2,700+ other apps remarkably fast.

Trigger workflow on

New Medium Risk Finding from the Detectify API

Next, do this

Run AI Command with the HARPA AI API

No credit card required

▶

Watch us build a workflow

8 min

Watch now ➜

Trusted by 1,000,000+ developers from startups to Fortune 500 companies

Developers ♥ Pipedream

Getting Started#

This integration creates a workflow with a Detectify trigger and HARPA AI action. When you configure and deploy the workflow, it will run on Pipedream's servers 24x7 for free.

Select this integration
Configure the New Medium Risk Finding trigger
1. Connect your Detectify account
2. Configure timer
3. Select a Domain Token
Configure the Run AI Command action
1. Connect your HARPA AI account
2. Configure URL
3. Optional- Configure Name
4. Optional- Configure Inputs
5. Optional- Configure Result Param
6. Optional- Configure Node
7. Optional- Configure Timeout
8. Optional- Configure Results Webhook
9. Optional- Configure Connection
Deploy the workflow
Send a test event to validate your setup
Turn on the trigger

Details#

This integration uses pre-built, source-available components from Pipedream's GitHub repo. These components are developed by Pipedream and the community, and verified and maintained by Pipedream.

To contribute an update to an existing component or create a new component, create a PR on GitHub. If you're new to Pipedream component development, you can start with quickstarts for trigger span and action development, and then review the component API reference.

Trigger#

New Medium Risk Finding on Detectify

Description:Emit new event when a moderate security finding at a medium risk level is recognized.

Version:0.0.1

Key:detectify-new-medium-risk-finding

View on GitHub

Detectify Overview#

The Detectify API provides a powerful interface for automating and integrating continuous web application security testing into your development cycle. With this API, you can programmatically start scans, fetch scan profiles, retrieve findings, and manage your Detectify domain assets. When leveraged through Pipedream, you can create serverless workflows that trigger actions in other apps based on the results from Detectify, ensuring timely responses to security threats and streamlining your DevSecOps processes.

Trigger Code#

import common from "../common/base.mjs";
import sampleEmit from "./test-event.mjs";

export default {
  ...common,
  key: "detectify-new-medium-risk-finding",
  name: "New Medium Risk Finding",
  description: "Emit new event when a moderate security finding at a medium risk level is recognized.",
  version: "0.0.1",
  type: "source",
  dedupe: "unique",
  methods: {
    ...common.methods,
    getResourceFn() {
      return this.detectify.listVulnerabilities;
    },
    getArgs(lastTs) {
      return {
        params: {
          "severity[]": "medium",
          "asset_token[]": this.domainToken,
          "created_after": lastTs,
        },
      };
    },
    getResourceType() {
      return "vulnerabilities";
    },
    generateMeta(vulnerability) {
      return {
        id: vulnerability.uuid,
        summary: `New medium risk finding: ${vulnerability.title}`,
        ts: Date.parse(this.getTs(vulnerability)),
      };
    },
  },
  sampleEmit,
};

Trigger Configuration#

This component may be configured based on the props defined in the component code. Pipedream automatically prompts for input values in the UI and CLI.

Label	Prop	Type	Description
Detectify	`detectify`	`app`	This component uses the Detectify app.
N/A	`db`	`$.service.db`	This component uses `$.service.db` to maintain state between executions.
	`timer`	`$.interface.timer`
Domain Token	`domainToken`	`string`	Select a value from the drop down menu.

Trigger Authentication#

Detectify uses API keys for authentication. When you connect your Detectify account, Pipedream securely stores the keys so you can easily authenticate to Detectify APIs in both code and no-code steps.

To retrieve your API Key,

Navigate to your Detectify account and sign in
Click the Team menu on the top left
Go to “Account Settings” > “API-Keys”

About Detectify#

The External Attack Surface Management platform powered by elite ethical hackers.

Action#

Run AI Command on HARPA AI

Description:Run an AI command. [See the documentation](https://harpa.ai/grid/grid-rest-api-reference#run-ai-command)

Version:0.0.1

Key:harpa_ai-run-ai-command

View on GitHub

Action Code#

import harpaAi from "../../harpa_ai.app.mjs";
import { parseObject } from "../../common/utils.mjs";

export default {
  key: "harpa_ai-run-ai-command",
  name: "Run AI Command",
  description: "Run an AI command. [See the documentation](https://harpa.ai/grid/grid-rest-api-reference#run-ai-command)",
  version: "0.0.1",
  type: "action",
  props: {
    harpaAi,
    url: {
      type: "string",
      label: "URL",
      description: "the page to run the AI command over",
    },
    name: {
      type: "string",
      label: "Name",
      description: "A command name to execute such as Summary",
      optional: true,
    },
    inputs: {
      type: "string[]",
      label: "Inputs",
      description: "An array of Strings, each one passed down into command in place of the user input. Inputs are used to bypass waiting for the user input in multi-step commands. For example [ \"REPORT\", \"DONE\" ] for the Summary command.",
      optional: true,
    },
    resultParam: {
      type: "string",
      label: "Result Param",
      description: "A HARPA {{parameter}} to interpret as the command result. By default is set to \"message\" to take the last chat message. Supports dot notation, e.g. \"g.data.email\". Refer to [AI Commands Guide](https://harpa.ai/chatml/overview) for more details.",
      optional: true,
    },
    node: {
      propDefinition: [
        harpaAi,
        "node",
      ],
    },
    timeout: {
      propDefinition: [
        harpaAi,
        "timeout",
      ],
    },
    resultsWebhook: {
      propDefinition: [
        harpaAi,
        "resultsWebhook",
      ],
    },
    connection: {
      type: "string",
      label: "Connection",
      description: "The title or ID of AI connection to use for AI actions. If not specified or connection not found, default connection is used.",
      optional: true,
    },
  },
  async run({ $ }) {
    const response = await this.harpaAi.sendAction({
      $,
      data: {
        action: "command",
        url: this.url,
        name: this.name,
        inputs: parseObject(this.inputs),
        resultParam: this.resultParam,
        node: this.node,
        timeout: this.timeout,
        resultsWebhook: this.resultsWebhook,
        connection: this.connection,
      },
    });
    $.export("$summary", `Ran AI command on ${this.url}`);
    return response;
  },
};

Action Configuration#

This component may be configured based on the props defined in the component code. Pipedream automatically prompts for input values in the UI.

Label	Prop	Type	Description
HARPA AI	`harpaAi`	`app`	This component uses the HARPA AI app.
URL	`url`	`string`	the page to run the AI command over
Name	`name`	`string`	A command name to execute such as Summary
Inputs	`inputs`	`string[]`	An array of Strings, each one passed down into command in place of the user input. Inputs are used to bypass waiting for the user input in multi-step commands. For example [ "REPORT", "DONE" ] for the Summary command.
Result Param	`resultParam`	`string`	A HARPA {{parameter}} to interpret as the command result. By default is set to "message" to take the last chat message. Supports dot notation, e.g. "g.data.email". Refer to AI Commands Guide for more details.
Node	`node`	`string`	A target Node ID which should run the command. If omitted, the first available Node will be used.
Timeout	`timeout`	`string`	Synchronous action execution timeout
Results Webhook	`resultsWebhook`	`string`	An asynchronous webhook URL to send the results to upon completion
Connection	`connection`	`string`	The title or ID of AI connection to use for AI actions. If not specified or connection not found, default connection is used.