Check npm advisories after GitHub code scanning alerts
Turn a security alert into a focused dependency check without opening another investigation thread.
Trigger
New Code Scanning Alert Created
Fires when a new code scanning alert is created in a repository.
Action
Query Bulk Security Advisories
Checks security advisories for multiple npm packages at once.
Why this helps
Security alerts can disappear into a busy backlog before anyone checks whether npm dependencies are affected.
- Keeps security triage in one routine
- Reduces missed dependency follow-up
Setup
Build it in a few focused steps.
- 1Connect GitHub and npm to Notis once.
- 2Create an automation in the portal.
- 3Write a prompt to check relevant npm advisories after each code scanning alert.
- 4Select the GitHub code scanning alert trigger and a report channel.
- 5Test it with one real alert.
Questions about this workflow
Does this change packages?
No. It checks advisory information and reports the result.
When this happens · Trigger
Fires when a new code scanning alert is created in a repository.
Do this · Action
Checks security advisories for multiple npm packages at once.
Supported Triggers and Actions
Notis builds workflows that link GitHub to Npm. A trigger fires from one place; an action lands in another.
GitHub triggers
Npm actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Delete User Token (Legacy)
Deletes a user authentication token from the npm registry.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Get All Packages Download Count Point
Retrieves total npm registry downloads for a specified period.
New Workflow Artifact Created
Fires when a new GitHub Actions workflow artifact is created in a repository.
Get NPM Download Counts Point
Gets total npm downloads for one package over a preset period or custom date range.
Branch Changed
Fires when a branch’s commits or protection status or settings change.
Get NPM Package Download Counts Over Date Range
Retrieves daily download counts for an npm package over a date range.
New Branch Created
Fires when a new branch is created in a GitHub repository.
Get All NPM Packages Download Counts by Period
Retrieves daily download counts for all npm packages over a period.
Check Run Status / Conclusion Changed
Fires when a GitHub check run’s status or conclusion changes.
Get Registry Changes Feed
Fetches a batch of npm registry changes for replication, with optional sequence and limit controls.
Check Suite Status / Conclusion Changed
Fires when a GitHub check suite changes status or conclusion for a reference.
Get NPM Registry Meta
Retrieves npm registry metadata to check connectivity or the authenticated username.
New Code Scanning Alert Created
Fires when a new code scanning alert is created in a repository.
Get NPM Package Version Downloads (Last 7 Days)
Retrieves download counts for specific package versions over the last seven days.
Connect any two apps with Notis in the middle.
GitHub and Npm, or any other combination from 1,500+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with $20 of usage included.
No card. Works with personal or business Npm.