Add Docker Hub image details to code scanning alert triage
When a code scanning alert appears, bring a relevant image's registry details into the same triage flow with Notis.
Trigger
New Code Scanning Alert Created
Triggers when a new code scanning alert is created in a repository. Fires an event for each newly created code scanning alert detected in the configured repository. Alerts can be filtered by Git reference, scanning tool, state, and severity. The payload includes the alert number, rule details, tool information, state, severity, and the location of the most recent instance.
Action
Get Docker Hub Image
Tool to retrieve detailed information about a specific image within a Docker Hub repository. Use after confirming namespace, repository name, and image ID. Example: GET_IMAGE(namespace="library", repository="ubuntu", image_id="sha256:...")
Why this helps
Security triage slows when alert investigation and image context live in separate tools.
- Keep registry details close to code alert review.
- Reduce manual context gathering across tools.
- Use the image identifier you provide for a precise lookup.
Setup
Build it in a few focused steps.
- 1Connect GitHub and Docker Hub once in the Notis portal.
- 2Create an automation through Automations, New Automation, or tell Notis from any channel.
- 3In one instruction, identify the Docker Hub namespace, repository and image ID to retrieve for the alert.
- 4Pick New Code Scanning Alert Created as the trigger and choose where run reports go.
- 5Test with one real alert and ensure the image identifier is available.
Questions about this workflow
Does a code scanning alert identify a Docker image?
The event description does not guarantee an image ID. Provide the namespace, repository and image ID or make sure the necessary identifier is available to Notis.
Will this fix the alert or remove an image?
No. The action retrieves image details only. It does not remediate code alerts or delete images.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link GitHub to Docker hub. A trigger fires from one place; an action lands in another.
GitHub triggers
Docker hub actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Add Organization Member
Tool to send an invitation for a user to join a Docker Hub organization. Use when you need to grant membership by inviting a user via their username after choosing the appropriate role.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Create Docker Hub Organization
Tool to create a Docker Hub organization. Use when you need to programmatically instantiate a new namespace for organizing repositories.
New Workflow Artifact Created
Triggers when a new workflow artifact is created in a GitHub repository. Monitors for newly created GitHub Actions workflow artifacts. Optionally filters by artifact name to restrict monitoring to specific artifacts.
Create Docker Hub Repository
Tool to create a Docker Hub repository under a namespace. Use when you need to programmatically instantiate a new repo under your organization or user.
Branch Changed
Triggers when a GitHub branch changes. Monitors a specific branch for: - New commits pushed (head commit SHA changes) - Protection status toggled (branch becomes protected or unprotected) - Protection settings changed, including: required status checks and their enforcement level, admin enforcement, required pull request reviews (dismiss stale reviews, code owner reviews, approving review count, last push approval), required linear history, force push allowance, deletion allowance, conversation resolution, branch locking, and fork syncing.
Create Docker Hub Webhook
Tool to create a webhook on a Docker Hub repository. Use after determining repository details.
New Branch Created
Triggers when a new branch is created in a GitHub repository. Detects newly created branches. Deleted branches do not fire events.
Delete Repository Image
Tool to delete a specific image within a Docker Hub repository. Use when you have confirmed the namespace, repository, and image ID to remove.
Check Run Status / Conclusion Changed
Triggers when a specific GitHub check run changes its status or conclusion. Monitors a single check run for changes to: status (queued, in_progress, completed, etc.), conclusion (success, failure, neutral, cancelled, skipped, timed_out, action_required), started_at, and completed_at.
Delete Docker Hub Organization
Tool to delete a specific Docker Hub organization. Use when you need to permanently remove an organization. Deletion is irreversible.
Check Suite Status / Conclusion Changed
Triggers when a GitHub check suite changes its status or conclusion for a given ref. Monitors all check suites associated with a git reference (branch, tag, or commit SHA) for changes to status (queued, in_progress, completed, etc.) and conclusion (success, failure, neutral, cancelled, skipped, timed_out, action_required, startup_failure, stale). Optionally filters by GitHub App ID.
Delete Docker Hub Repository
Tool to delete a specific Docker Hub repository. Use when you need to permanently remove a repository. Deletion is irreversible.
New Code Scanning Alert Created
Triggers when a new code scanning alert is created in a repository. Fires an event for each newly created code scanning alert detected in the configured repository. Alerts can be filtered by Git reference, scanning tool, state, and severity. The payload includes the alert number, rule details, tool information, state, severity, and the location of the most recent instance.
Delete Repository Tag
Tool to delete a specific tag from a Docker Hub repository. Use after confirming the tag to remove.
Connect any two apps with Notis in the middle.
GitHub and Docker hub, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Docker hub.