Posts to Slack as a bot, and verifies the requests Slack sends back. The bot token identifies your application, the signing secret proves an incoming request really came from Slack, and the channel id is where messages land. Scope the token to the channels it needs: a bot token is not read-only, and one granted broadly can read far more of a workspace than the feature requires.
Slack's own documentation →SLACK_BOT_TOKENSLACK_SIGNING_SECRETSLACK_CHANNEL_ID