Enable AI threat detection when GitHub finds a secret
A security alert should trigger protection, not another task on your mental list.
Trigger
New Secret Scanning Alert Detected
Triggers when a new secret scanning alert is detected in a repository.
Action
Set AI Threat Detection
Why this helps
A newly exposed credential can be easy to miss while you are already handling an incident.
- Responds to high-risk alerts immediately.
- Reduces manual security follow-up.
- Keeps protection consistent during incidents.
Setup
Build it in a few focused steps.
- 1Connect GitHub and NextDNS to Notis once through the portal.
- 2Create an automation in Automations or ask Notis to create it conversationally.
- 3Use this instruction: When GitHub detects a new secret scanning alert, review the selected NextDNS profile and enable AI threat detection.
- 4Choose the GitHub secret scanning alert trigger and a channel for run reports, then test with one real alert.
Questions about this workflow
Does this revoke the exposed secret?
No. It changes the selected NextDNS security setting; credential rotation remains a separate GitHub or provider task.
Can I choose the profile?
Yes. Mention the profile in the plain-language instruction.
When this happens · Trigger
Triggers when a new secret scanning alert is detected in a repository.
Do this · Action
Add a top-level domain to a profile’s security blocklist.
Supported Triggers and Actions
Notis builds workflows that link GitHub to Nextdns. A trigger fires from one place; an action lands in another.
GitHub triggers
Nextdns actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Add Blocked TLD
Add a top-level domain to a profile’s security blocklist.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Add Allowlist Entry
Adds a domain to a profile’s allowlist after you obtain the profile ID.
New Workflow Artifact Created
Triggers when a new workflow artifact is created in a repository.
Add Denylist Domain
Add a domain to a profile’s denylist so DNS filtering blocks it.
Branch Changed
Triggers when a branch receives commits or its protection settings change.
Clear Logs
Clear all DNS query logs for a profile; this action cannot be undone.
New Branch Created
Triggers when a new branch is created in a repository.
Add Parental Control Category
Adds a content category to a profile’s parental controls.
Check Run Status / Conclusion Changed
Triggers when a check run’s status or conclusion changes.
Create Profile
Create a profile with its own DNS filtering and security settings.
Check Suite Status / Conclusion Changed
Triggers when a check suite’s status or conclusion changes for a reference.
Add Parental Control Service
Adds a service to a profile’s parental controls.
New Code Scanning Alert Created
Triggers when a new code scanning alert is created in a repository.
Delete NextDNS Configuration
Delete an existing configuration profile.
Connect any two apps with Notis in the middle.
GitHub and Nextdns, or any other combination from 1,500+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with $20 of usage included.
No card. Works with personal or business Nextdns.