Check New Release Links Automatically
A new branch or tag can trigger a quick VirusTotal URL reputation lookup for the links you rely on.
Trigger
New Git Reference Created
Triggers when a new Git reference (branch or tag) matching a specified prefix is created in a repository. Fires an event for each newly created branch or tag whose name matches the configured prefix. Use ``ref_prefix`` to control what is monitored: - ``heads/`` to watch all branches - ``heads/feature/`` to watch only feature branches - ``tags/`` to watch all tags - ``tags/v`` to watch tags starting with 'v' The payload includes the full reference name, node ID, the SHA and type of the Git object the reference points to, and the reference API URL.
Action
Get URL Report
Tool to retrieve the analysis report of a url. use when you have a url identifier (base64-url without padding) and need detailed scan results, reputation, and metadata.
Why this helps
New release references often come with preview or deployment URLs that are easy to forget to inspect.
- Checks customer-facing or preview links at creation time.
- Reduces browser-tab investigation.
- Helps catch suspicious redirects or compromised destinations earlier.
Setup
Build it in a few focused steps.
- 1Connect GitHub and VirusTotal to Notis once through the portal.
- 2Create an automation in the portal or ask Notis in plain language.
- 3Use this instruction: “When a new GitHub branch or tag matching the monitored prefix is created, retrieve the VirusTotal URL report for its associated preview or release URL and summarize the result.”
- 4Select the new-reference trigger and choose a channel for run reports.
- 5Test with one branch or tag.
Questions about this workflow
Can this monitor only tags?
Yes. Configure the reference prefix for tags, such as tags/v.
What if the URL has no report?
Ask Notis to report that clearly and suggest scanning the URL if appropriate.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link GitHub to Virustotal. A trigger fires from one place; an action lands in another.
GitHub triggers
Virustotal actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Add VirusTotal Comment
Tool to add a comment to a virustotal resource (file, url, domain, or ip address). use after analyzing a resource to leave contextual feedback. provide exactly one identifier per call.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Add Vote
Tool to add a vote (harmless/malicious) to a virustotal resource. use after reviewing analysis results to submit your verdict.
New Workflow Artifact Created
Triggers when a new workflow artifact is created in a GitHub repository. Monitors for newly created GitHub Actions workflow artifacts. Optionally filters by artifact name to restrict monitoring to specific artifacts.
Get Analysis Report
Tool to retrieve the analysis report of a file or url submission. use after obtaining an analysis id to fetch its detailed report.
Branch Changed
Triggers when a GitHub branch changes. Monitors a specific branch for: - New commits pushed (head commit SHA changes) - Protection status toggled (branch becomes protected or unprotected) - Protection settings changed, including: required status checks and their enforcement level, admin enforcement, required pull request reviews (dismiss stale reviews, code owner reviews, approving review count, last push approval), required linear history, force push allowance, deletion allowance, conversation resolution, branch locking, and fork syncing.
Get comments
Tool to retrieve the latest comments on a virustotal resource. use when you need to review user-generated comments for a file, url, domain, or ip after obtaining its identifier.
New Branch Created
Triggers when a new branch is created in a GitHub repository. Detects newly created branches. Deleted branches do not fire events.
Get Domain Relationships
Tool to retrieve relationship objects for a given domain. use when you have a domain and need to explore its related entities.
Check Run Status / Conclusion Changed
Triggers when a specific GitHub check run changes its status or conclusion. Monitors a single check run for changes to: status (queued, in_progress, completed, etc.), conclusion (success, failure, neutral, cancelled, skipped, timed_out, action_required), started_at, and completed_at.
Get Domain Report
Tool to retrieve the analysis report of a domain. use when you need detailed insight on a domain's reputation and analysis stats.
Check Suite Status / Conclusion Changed
Triggers when a GitHub check suite changes its status or conclusion for a given ref. Monitors all check suites associated with a git reference (branch, tag, or commit SHA) for changes to status (queued, in_progress, completed, etc.) and conclusion (success, failure, neutral, cancelled, skipped, timed_out, action_required, startup_failure, stale). Optionally filters by GitHub App ID.
Get File Report
Tool to retrieve the analysis report of a file. use when you have a file's hash and need detailed scan metadata.
New Code Scanning Alert Created
Triggers when a new code scanning alert is created in a repository. Fires an event for each newly created code scanning alert detected in the configured repository. Alerts can be filtered by Git reference, scanning tool, state, and severity. The payload includes the alert number, rule details, tool information, state, severity, and the location of the most recent instance.
Get IP Address Relationships
Tool to retrieve objects related to a specific ip address by relationship type. use when you have an ip and need to explore connected files, urls, or other entities.
Connect any two apps with Notis in the middle.
GitHub and Virustotal, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Virustotal.