Add searchable context to new secret scanning alerts
Search relevant indexed records when a secret scanning alert appears, so investigation can start with more context.
Trigger
New Secret Scanning Alert Detected
Triggers when a new secret scanning alert is detected in a repository.
Action
Query Index
Searches an Elasticsearch index for documents.
Why this helps
Secret alerts need prompt attention, and finding related records across tools can add avoidable delay.
- Bring possible related records into the investigation.
- Reduce the effort of checking separate search tools.
- Keep findings together in the automation run report.
Setup
Build it in a few focused steps.
- 1Connect GitHub and Elasticsearch once in the Notis portal.
- 2Create an automation named Secret Alert Exposure Context.
- 3In one instruction, ask Notis to search Elasticsearch for records related to the alert metadata and summarize matches without repeating any secret value.
- 4Pick New Secret Scanning Alert Detected as the trigger and choose where run reports go.
- 5Test with one real alert and confirm the index contains useful security records.
Questions about this workflow
Will the report expose the detected secret?
Tell Notis in the instruction to avoid repeating secret values. Review the report channel and indexed data handling for your needs.
Does this close or resolve the alert?
No. It searches Elasticsearch and summarizes context; it does not change GitHub alert state.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link GitHub to Elasticsearch. A trigger fires from one place; an action lands in another.
GitHub triggers
Elasticsearch actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Get Index Schema
View the structure and field mappings of an index.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
List Indices
Lists available Elasticsearch indices.
New Workflow Artifact Created
Triggers when a new workflow artifact is created in a repository.
Query Index
Searches an Elasticsearch index for documents.
Branch Changed
Triggers when a branch receives commits or its protection settings change.
Ping Cluster
Pings the cluster to check its connectivity and health.
New Branch Created
Triggers when a new branch is created in a repository.
Check Run Status / Conclusion Changed
Triggers when a check run’s status or conclusion changes.
Check Suite Status / Conclusion Changed
Triggers when a check suite’s status or conclusion changes for a reference.
New Code Scanning Alert Created
Triggers when a new code scanning alert is created in a repository.
Connect any two apps with Notis in the middle.
GitHub and Elasticsearch, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Elasticsearch.