Block domains reported in GitHub security issues
Capture a concrete security response directly from the issue where it was reported.
Trigger
New Issue Created
Triggers when a new issue is created in a repository.
Action
Add Denylist Domain
Add a domain to a profile’s denylist so DNS filtering blocks it.
Why this helps
A domain can remain reachable while a security issue waits for manual follow-up.
- Shortens the path from report to protection.
- Keeps the response tied to the source issue.
- Reduces the chance of forgetting a temporary block.
Setup
Build it in a few focused steps.
- 1Connect GitHub and NextDNS to Notis once through the portal.
- 2Create the automation in Automations or ask Notis to create it conversationally.
- 3Use this instruction: When a new GitHub issue labeled for security includes a domain to block, add that domain to the selected NextDNS denylist and report the result.
- 4Choose the new issue trigger, set the run-report channel, and test with one real security issue.
Questions about this workflow
How does Notis know which domain to block?
State in the instruction that the domain should be read from the security issue text.
Can it avoid duplicate entries?
Yes. Ask Notis to review the current denylist before adding the domain.
When this happens · Trigger
Triggers when a new issue is created in a repository.
Do this · Action
Add a domain to a profile’s denylist so DNS filtering blocks it.
Supported Triggers and Actions
Notis builds workflows that link GitHub to Nextdns. A trigger fires from one place; an action lands in another.
GitHub triggers
Nextdns actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Add Blocked TLD
Add a top-level domain to a profile’s security blocklist.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Add Allowlist Entry
Adds a domain to a profile’s allowlist after you obtain the profile ID.
New Workflow Artifact Created
Triggers when a new workflow artifact is created in a repository.
Add Denylist Domain
Add a domain to a profile’s denylist so DNS filtering blocks it.
Branch Changed
Triggers when a branch receives commits or its protection settings change.
Clear Logs
Clear all DNS query logs for a profile; this action cannot be undone.
New Branch Created
Triggers when a new branch is created in a repository.
Add Parental Control Category
Adds a content category to a profile’s parental controls.
Check Run Status / Conclusion Changed
Triggers when a check run’s status or conclusion changes.
Create Profile
Create a profile with its own DNS filtering and security settings.
Check Suite Status / Conclusion Changed
Triggers when a check suite’s status or conclusion changes for a reference.
Add Parental Control Service
Adds a service to a profile’s parental controls.
New Code Scanning Alert Created
Triggers when a new code scanning alert is created in a repository.
Delete NextDNS Configuration
Delete an existing configuration profile.
Connect any two apps with Notis in the middle.
GitHub and Nextdns, or any other combination from 1,500+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with $20 of usage included.
No card. Works with personal or business Nextdns.