GitHub
11/10/2026, 10:51 AMpkg/santa, osctrl-tls sync endpoint, Santa page in the UI).
Problem
Approvers should not have to watch the UI. Workshop offers Slack buttons and one-click email approve/deny.
Scope
• Notify approvers of new requests through existing alert channels (webhook/email).
• Signed, single-use, expiring approve/deny links; acting through a link still requires the approver's osctrl session.
• Slack interactive buttons as a follow-up if the webhook channel is not enough.
Acceptance
• Links cannot be replayed or used by another user; expired links fail closed.
jmpsec/osctrl