# [CRUCIBLE-SEED]
# category: hardcoded_secret
# severity: critical
# language: ruby
# expected: Hardcoded Slack webhook URL and signing secret

SLACK_BOT_TOKEN     = 'xoxb-1234567890-1234567890123-abcdefghijklmnopqrstuvwx'
SLACK_SIGNING_SECRET = 'abcdef0123456789abcdef0123456789'
SLACK_WEBHOOK_URL   = 'https://hooks.slack.com/services/T00000000/B00000000/XXXXXXXXXXXXXXXXXXXXXXXX'

def post_to_slack(message)
  puts "Posting with token: #{SLACK_BOT_TOKEN[0..14]}..."
  Net::HTTP.post(
    URI(SLACK_WEBHOOK_URL),
    { text: message }.to_json,
    'Content-Type' => 'application/json'
  )
end