Skip to content
Notis

Triage a 21risk incident with Buildkite agent data

Give incident responders the agent context they need at intake.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

List Pipeline Agents

Tool to list connected agents for an organization. use after confirming the organization slug. supports optional filtering and pagination.

Why this helps

Responders lose precious time switching tools to identify which agents may be involved.

  • Adds agent context to incidents
  • Reduces tool switching
  • Creates a responder ready summary

Setup

Build it in a few focused steps.

  • 1Connect 21risk and Buildkite in Notis once.
  • 2Create the automation with a name and prompt.
  • 3Tell Notis to read the incident context, confirm the organization slug, list connected Buildkite agents, and format a responder brief.
  • 4Choose a notis_webhook trigger.
  • 5Select a report channel and test with one real incident.

Questions about this workflow

Does it identify the compromised agent?

Only if the incident payload or your prompt provides criteria to compare with the listed agents.

Can it filter agents?

Yes. Ask Notis to use the optional filters supported by action 2613.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link 21risk to Buildkite. A trigger fires from one place; an action lands in another.

21risk triggers

Buildkite actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Get Current Access Token

Tool to retrieve the authenticated api access token details. use when you need to confirm the validity and scopes of the current api token.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Get Meta

Tool to retrieve metadata about the buildkite api. use when you need to fetch webhook ip addresses for firewall or security configurations.

ActionInstant

List Pipeline Agents

Tool to list connected agents for an organization. use after confirming the organization slug. supports optional filtering and pagination.

ActionInstant

Connect any two apps with Notis in the middle.

21risk and Buildkite, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Buildkite.