Contributing from Cortex XSOAR UI

Cortex XSOAR v6.0 introduces a Marketplace which is the central location for installing, exchanging, contributing, and managing all of your content, including playbooks, integrations, automations, fields, layouts, and more. For more information, you can read all about the Marketplace.

This article walks you through the process of contributing content from the Cortex XSOAR Server to the Marketplace. This flow is meant to ease and speed up the contribution process for individual contributors who are not fully familiar with GitHub and how the Pull Request process works. Technology Partners should not use this flow and submit their Packs via a GitHub Pull Request.

  1. Contribute your content pack from Cortex XSOAR. For more information, see Contribute a Content Pack.

  2. After you contribute the content pack a message displays explaining that your contribution is ready for review, and includes a link to a form you need to fill in to complete your contribution. You will receive an email with a link to the form.

  3. Completing the form

    1. Create a New Pack

      These instructions are only intended for creating a new pack. If you have a pack that you need to update, follow the instructions in the Update an Existing Pack section.

      1. Fill in additional details, such as, pack name, author, and description.
      2. Log in to your GitHub account so you can participate in the review process of the pull request that will be opened for your content pack.
      3. Sign the Palo Alto Networks Contributor License Agreement.
    2. Update an Existing Pack

      If your contribution is an update to an existing pack, complete the following steps. (See Notes for more information regarding updating an existing pack.)

      1. Select Update Existing Pack from the Select Contribution Mode dropdown.
      2. Select the pack that you wish to update from the Select Existing Pack dropdown.
      3. Log in to your GitHub account so you can participate in the review process of the pull request that will be opened for your content pack.
      4. Sign the Palo Alto Networks Contributor License Agreement.
  1. After you submit the form you will be redirected to a page that informs you that your pack was received and is being processed.

  2. A GitHub branch will be created in the xsoar-contrib Content repository fork with the changes from your contribution.

  3. You will receive an invitation to join the xsoar-contrib organization. Being a member of the organization enables the xsoar-bot to invite you to a GitHub team and grant you write permissions to the created branch. (Each contributor can only modify files in content packs that they contributed).

  4. The pull request is created and a reviewer is assigned.

  5. You can now modify the files changed in the pull request as part of the review process.

Notes

  1. There are two options for updating a content pack that you contributed and which is already in the GitHub pull request process, you will need to either modify the files directly in the pull request created in GitHub directly or close the pull request and create a new contribution including your changes.
  2. The contribution mode selection dropdown will only appear if content items that were part of your contribution were detected as originating from existing sources (for example, you created a new automation in the UI by clicking "Duplicate Automation").
  3. When updating an existing pack, the pack options are determined and populated by the content items included in your contribution. For example, if you were to duplicate the AbuseIPDB integration and save the duplicate with your changes as AbuseIPDB_copy. Note: the default name applied to duplicated content appends _copy to the original name. This is important because it indicates to us that this most likely contains a modification to existing content. In our example, the pack to which the AbuseIPDB integration belongs, AbuseIPDB, will appear as an option in the dropdown for updating content.
Last updated on