Check which secrets exist without exposing their values
Give reviewers a useful inventory while keeping actual secret values out of the report.
Trigger
Webhook received
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Action
List Secret Names
Tool to retrieve the list of secret names from a specific Doppler config. Use when you need to list available secret names without their values.
Why this helps
Reviewers need to understand what a config contains, but fetching values can expose more sensitive data than the review needs.
- Lists names without retrieving secret values.
- Makes config scope easier to review.
- Reduces unnecessary handling of sensitive values.
Setup
Build it in a few focused steps.
- 1Connect 21risk and Doppler once in the Notis portal.
- 2Create an automation in Automations, New Automation, and name it.
- 3Tell Notis to use the request's project and config details to list secret names only, then summarize the inventory for the 21risk review.
- 4Choose a webhook trigger and where run reports should go.
- 5Test with one real config and confirm no secret values appear in the report.
Questions about this workflow
Does this retrieve secret values?
No. It uses Doppler's list secret names action, which is intended to return names without values.
What config will it inspect?
The webhook request and automation prompt need to identify the project and config to review.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link 21risk to Doppler. A trigger fires from one place; an action lands in another.
21risk triggers
Doppler actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Get Authenticated User Info
Tool to retrieve information about the authenticated user or token. Use when you need to verify authentication status or get details about the current token's workplace and permissions.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Get Config Log
Tool to retrieve a specific config log from Doppler. Use when you need to view details about a particular configuration change or event.
List Config Logs
Tool to retrieve configuration change logs for a specific config in a project. Use when you need to view the history of configuration changes, track who made changes, or identify rollback actions.
Get Config
Tool to retrieve a specific Doppler config by project and config name. Use when you need to get configuration details for a specific project environment.
List Doppler Configs
Tool to list configurations from a Doppler project. Use when you need to retrieve all configs or filter by environment. Supports pagination for large result sets.
Create Encrypted Share Link
Tool to generate a Doppler Share link by sending an encrypted secret. Use when you need to securely share secrets with end-to-end encryption. The receive flow is end-to-end encrypted where the encrypted secret will be decrypted on the recipient's browser.
Create Plain Text Share Link
Tool to generate a Doppler Share link by sending a plain text secret. Use when you need to securely share secrets with expiration controls. The secret is not stored in plain text by Doppler; the receive flow is end-to-end encrypted where the encrypted secret is decrypted in the browser.
List Environments
Tool to list all environments in a Doppler project. Use when you need to retrieve the environments available in a specific project.
Connect any two apps with Notis in the middle.
21risk and Doppler, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Doppler.