Never Miss a Security Alert
When GitHub's code scanning detects a vulnerability, Notis sends you a Slack reminder with severity and details.
Trigger
New Code Scanning Alert Created
Triggers when a new code scanning alert is created in a repository. Fires an event for each newly created code scanning alert detected in the configured repository. Alerts can be filtered by Git reference, scanning tool, state, and severity. The payload includes the alert number, rule details, tool information, state, severity, and the location of the most recent instance.
Action
Create a reminder
Creates a slack reminder with specified text and time; time accepts unix timestamps, seconds from now, or natural language (e.g., 'in 15 minutes', 'every thursday at 2pm').
Why this helps
Security alerts in GitHub can be easy to dismiss without addressing. Neurodivergent developers need explicit, persistent reminders to ensure vulnerabilities are patched.
- Security issues get prioritized and addressed quickly
- No more accidentally ignoring critical vulnerabilities
- Tracks security status in your team's communication hub
Setup
Build it in a few focused steps.
- 1Connect GitHub and Slack to Notis
- 2Create an automation: 'Remind me when GitHub finds a security vulnerability'
- 3Describe the outcome: 'When a new code scanning alert is created, send a Slack reminder with the issue details and severity'
- 4Select the trigger: New Code Scanning Alert Created
- 5Choose a dedicated Slack channel for security alerts
- 6Test by enabling Dependabot or code scanning on a repository
Questions about this workflow
Can I filter by severity level?
Yes. Tell Notis to only remind you about high and critical vulnerabilities, or include all levels.
What if a dependency needs updating but it's low priority?
Tell Notis to separate low-priority alerts from critical ones, or handle them in a different automation.
Can I include the CVE details in the Slack reminder?
Yes. Notis will include the CVE ID, severity score, and remediation steps in the reminder.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link GitHub to Slack. A trigger fires from one place; an action lands in another.
GitHub triggers
Slack actions
New Workflow Artifact Created
Triggers when a new workflow artifact is created in a GitHub repository. Monitors for newly created GitHub Actions workflow artifacts. Optionally filters by artifact name to restrict monitoring to specific artifacts.
Set snooze duration
Deprecated: turns on do not disturb mode for the current user, or changes its duration. use `set dnd duration` instead.
Branch Changed
Triggers when a GitHub branch changes. Monitors a specific branch for: - New commits pushed (head commit SHA changes) - Protection status toggled (branch becomes protected or unprotected) - Protection settings changed, including: required status checks and their enforcement level, admin enforcement, required pull request reviews (dismiss stale reviews, code owner reviews, approving review count, last push approval), required linear history, force push allowance, deletion allowance, conversation resolution, branch locking, and fork syncing.
Add a custom emoji to a Slack team
Deprecated: adds a custom emoji to a slack workspace given a unique name and an image url. use `add emoji` instead.
New Branch Created
Triggers when a new branch is created in a GitHub repository. Detects newly created branches. Deleted branches do not fire events.
Add an emoji alias
Adds an alias for an existing custom emoji in a slack enterprise grid organization.
Check Run Status / Conclusion Changed
Triggers when a specific GitHub check run changes its status or conclusion. Monitors a single check run for changes to: status (queued, in_progress, completed, etc.), conclusion (success, failure, neutral, cancelled, skipped, timed_out, action_required), started_at, and completed_at.
Add a remote file
Adds a reference to an external file (e.g., google drive, dropbox) to slack for discovery and sharing, requiring a unique `external id` and an `external url` accessible by slack.
Check Suite Status / Conclusion Changed
Triggers when a GitHub check suite changes its status or conclusion for a given ref. Monitors all check suites associated with a git reference (branch, tag, or commit SHA) for changes to status (queued, in_progress, completed, etc.) and conclusion (success, failure, neutral, cancelled, skipped, timed_out, action_required, startup_failure, stale). Optionally filters by GitHub App ID.
Add a star to an item
Stars a channel, file, file comment, or a specific message in slack.
New Code Scanning Alert Created
Triggers when a new code scanning alert is created in a repository. Fires an event for each newly created code scanning alert detected in the configured repository. Alerts can be filtered by Git reference, scanning tool, state, and severity. The payload includes the alert number, rule details, tool information, state, severity, and the location of the most recent instance.
Add call participants
Registers new participants added to a slack call.
New Repository Collaborator Added
Triggers when a new collaborator is added to a GitHub repository. Monitors the full list of collaborators on a repository and fires an event for each newly added collaborator. The payload includes the collaborator's GitHub username, account ID, profile URL, avatar URL, permission flags (pull, triage, push, maintain, admin), and assigned role name.
Add emoji
Adds a custom emoji to a slack workspace given a unique name and an image url; subject to workspace emoji limits.
Commit Event
Triggered when a new commit is pushed to a repository.
Add reaction to message
Adds a specified emoji reaction to an existing message in a slack channel, identified by its timestamp; does not remove or retrieve reactions.
Connect any two apps with Notis in the middle.
Not just GitHub and Slack. Any combination from 985+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7 days free trial with 20$ free usage included.
No card. Works with personal or business Slack.