Github Monitor

  1. Create a Github token at https://github.com/settings/tokens
  2. Pop that in yeti.conf
  3. Create a an indicator with the following essential details :
    • query text : (see query template below)
    • query type : github
    • diamond model : depends on context

Example of the Github Monitor settings

Here are some gotchas:

  • The query type won’t show up in the list - you need to type it in
  • The query text isn’t really documented outside of the code for this plugin. The example in the code is missing an inverted comma.
  • You need to fill in the diamond model field.

Query Template

[
    {
        "type": "code",
        "query": "CVE-2024-49138 poc"
    }
]