Add Elasticsearch context to GitHub code scanning alerts
See whether a new code scanning alert has related records in Elasticsearch before deciding what to investigate next.
Trigger
New Code Scanning Alert Created
Triggers when a new code scanning alert is created in a repository.
Action
Query Index
Searches an Elasticsearch index for documents.
Why this helps
A new security alert can take time to assess when relevant indexed records are in a separate search workflow.
- Bring potentially related indexed records into the alert review.
- Reduce manual searching across tools.
- Keep the alert and its evidence together in a run report.
Setup
Build it in a few focused steps.
- 1Connect GitHub and Elasticsearch once in the Notis portal.
- 2Create an automation named Code Alert Context Search.
- 3In one instruction, ask Notis to search relevant Elasticsearch records for context related to each new code scanning alert and summarize matches.
- 4Pick New Code Scanning Alert Created as the trigger and choose where run reports go.
- 5Test with one real alert and check that the index contains records useful for this search.
Questions about this workflow
Does this change or close the GitHub alert?
No. The configured Elasticsearch action searches records and Notis summarizes the results; it does not change the GitHub alert.
What if Elasticsearch has no relevant records?
The run can report that no relevant matches were found. Useful results depend on what your indices contain.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link GitHub to Elasticsearch. A trigger fires from one place; an action lands in another.
GitHub triggers
Elasticsearch actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Get Index Schema
View the structure and field mappings of an index.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
List Indices
Lists available Elasticsearch indices.
New Workflow Artifact Created
Triggers when a new workflow artifact is created in a repository.
Query Index
Searches an Elasticsearch index for documents.
Branch Changed
Triggers when a branch receives commits or its protection settings change.
Ping Cluster
Pings the cluster to check its connectivity and health.
New Branch Created
Triggers when a new branch is created in a repository.
Check Run Status / Conclusion Changed
Triggers when a check run’s status or conclusion changes.
Check Suite Status / Conclusion Changed
Triggers when a check suite’s status or conclusion changes for a reference.
New Code Scanning Alert Created
Triggers when a new code scanning alert is created in a repository.
Connect any two apps with Notis in the middle.
GitHub and Elasticsearch, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Elasticsearch.