Skip to content
Notis

Review connected Buildkite agents with threat context

Get a recurring view of connected agents for a confirmed organization, with relevant Abuselpdb findings called out for follow-up.

Trigger

Recurring schedule

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

Action

List Pipeline Agents

Lists connected agents for an organization.

Why this helps

Agent inventory and abuse reports are easy to review separately, making security follow-up slower and less consistent.

  • Receive a current list of connected agents for the organization you specify.
  • Bring relevant abuse reports or threat findings into the same review.
  • Make missing organization details visible instead of silently guessing.

Setup

Build it in a few focused steps.

  • 1Connect Abuselpdb and Buildkite once in the Notis portal.
  • 2Create an automation in Automations, New Automation, and name the review.
  • 3Tell Notis to list connected agents for the Buildkite organization slug you provide and summarize relevant Abuselpdb findings for review.
  • 4Pick a recurring schedule and choose where run reports should go.
  • 5Test with one real example using a confirmed organization slug and review the returned agent list.

Questions about this workflow

Can Notis discover the organization slug in this workflow?

This action lists agents after the organization slug is confirmed. Supply the slug in your instruction or use a separate organization discovery workflow first.

Will the workflow disable agents with a concerning finding?

No. The available action only lists agents. Notis can summarize findings for a human to assess, but it cannot disable agents with the listed actions.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Abuselpdb to Buildkite. A trigger fires from one place; an action lands in another.

Abuselpdb triggers

Buildkite actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Get Current Access Token

Retrieves details about the current authenticated access token.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Get Meta

Retrieves API metadata, including webhook IP addresses.

ActionInstant

List Pipeline Agents

Lists connected agents for an organization.

ActionInstant

Get User

Retrieves details about the authenticated user who owns the API token.

ActionInstant

List Organizations

Lists all organizations the authenticated user belongs to.

ActionInstant

Connect any two apps with Notis in the middle.

Abuselpdb and Buildkite, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Buildkite.