Turn security findings into visible work
New code scanning alerts become prioritized Bubble items before they become forgotten risks.
Trigger
New Code Scanning Alert Created
Triggers when a new code scanning alert is created in a repository. Fires an event for each newly created code scanning alert detected in the configured repository. Alerts can be filtered by Git reference, scanning tool, state, and severity. The payload includes the alert number, rule details, tool information, state, severity, and the location of the most recent instance.
Action
Create Thing
Tool to create a new Thing. Use when providing a complete JSON payload to add a new record.
Why this helps
Security findings compete with feature work and can vanish before anyone owns the follow-up.
- Create an explicit security queue
- Preserve severity and location context
- Make remediation ownership visible
Setup
Build it in a few focused steps.
- 1Connect GitHub and Bubble to Notis once through the portal.
- 2Create an automation in the portal or ask Notis to create a Bubble security item for each new code scanning alert.
- 3Pick the New Code Scanning Alert Created trigger and choose a channel for run reports.
- 4Test it with one alert and confirm the Bubble item contains enough context to act.
Questions about this workflow
Can I focus on high-severity alerts?
Yes. State the severity or scanning tool you want Notis to prioritize in the instruction.
Can this feed an existing Bubble backlog?
Yes. Tell Notis which Bubble data type or workflow should receive the item.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link GitHub to Bubble. A trigger fires from one place; an action lands in another.
GitHub triggers
Bubble actions
New Workflow Artifact Created
Triggers when a new workflow artifact is created in a GitHub repository. Monitors for newly created GitHub Actions workflow artifacts. Optionally filters by artifact name to restrict monitoring to specific artifacts.
Bulk Create Things
Tool to bulk create multiple Things in Bubble via newline-separated JSON. Use when you need to insert many records at once. Must have Create via API permission.
Branch Changed
Triggers when a GitHub branch changes. Monitors a specific branch for: - New commits pushed (head commit SHA changes) - Protection status toggled (branch becomes protected or unprotected) - Protection settings changed, including: required status checks and their enforcement level, admin enforcement, required pull request reviews (dismiss stale reviews, code owner reviews, approving review count, last push approval), required linear history, force push allowance, deletion allowance, conversation resolution, branch locking, and fork syncing.
Create Thing
Tool to create a new Thing. Use when providing a complete JSON payload to add a new record.
New Branch Created
Triggers when a new branch is created in a GitHub repository. Detects newly created branches. Deleted branches do not fire events.
Delete Thing By ID
Tool to delete a Bubble Thing by its unique ID. Use when you need to remove a specific record via the Bubble Data API.
Check Run Status / Conclusion Changed
Triggers when a specific GitHub check run changes its status or conclusion. Monitors a single check run for changes to: status (queued, in_progress, completed, etc.), conclusion (success, failure, neutral, cancelled, skipped, timed_out, action_required), started_at, and completed_at.
Get Thing By ID
Retrieves a single Thing (record) from a Bubble Data Type by its unique ID. This is a read-only operation that fetches complete details of a specific record. The response includes all custom fields defined in the Data Type, plus standard Bubble fields (_id, created_by, created_date, modified_date). Use when you need to: - Fetch details of a specific record you know the ID of - Verify a record exists - Get the latest field values for a Thing Note: Requires the Data API to be enabled in your Bubble app settings and the specific Data Type to be exposed via the API.
Check Suite Status / Conclusion Changed
Triggers when a GitHub check suite changes its status or conclusion for a given ref. Monitors all check suites associated with a git reference (branch, tag, or commit SHA) for changes to status (queued, in_progress, completed, etc.) and conclusion (success, failure, neutral, cancelled, skipped, timed_out, action_required, startup_failure, stale). Optionally filters by GitHub App ID.
Patch Thing By ID
Tool to modify selected fields on a Thing by its unique ID. Use after confirming the Thing exists.
New Code Scanning Alert Created
Triggers when a new code scanning alert is created in a repository. Fires an event for each newly created code scanning alert detected in the configured repository. Alerts can be filtered by Git reference, scanning tool, state, and severity. The payload includes the alert number, rule details, tool information, state, severity, and the location of the most recent instance.
Replace Thing by ID
Tool to replace all editable fields on a Thing by its Unique ID. Use when you need a full overwrite of a Thing's fields and reset omitted fields to default.
New Repository Collaborator Added
Triggers when a new collaborator is added to a GitHub repository. Monitors the full list of collaborators on a repository and fires an event for each newly added collaborator. The payload includes the collaborator's GitHub username, account ID, profile URL, avatar URL, permission flags (pull, triage, push, maintain, admin), and assigned role name.
Download File
Tool to download a file given its URL. Use when you need to retrieve file content and obtain an s3key for subsequent upload tests.
Commit Event
Triggered when a new commit is pushed to a repository.
Create Temp File
Tool to upload bytes as a temporary file to Cloudflare R2 and return an S3 key. Use when you need a short-lived file reference before persisting it in a Thing.
Connect any two apps with Notis in the middle.
Not just GitHub and Bubble. Any combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7 days free trial with 20$ free usage included.
No card. Works with personal or business Bubble.