Rotate secrets when sensitive files are shared
Respond to access changes with a clear configuration update and report.
Trigger
File Shared (Permissions Added)
Triggers when new sharing permissions are granted to a file or folder. Uses Drive's `changes.list` endpoint with inline `permissions` in the `fields` mask so each change carries the file's current permission set provider-atomically. We diff that against `seen_permission_keys` to identify newly added grants. Drive page tokens are the primary cursor; if Drive rejects a stored token, the trigger raises `PollingTriggerError` without clearing state rather than silently re-baselining and dropping events. Limitation: truly ephemeral permissions (added and revoked between two polls without any other file modification in between) are not detected. Drive Activity API would catch those but requires an additional OAuth scope and a different payload contract.
Action
Update Doppler Secrets
Tool to update secrets in a Doppler config. Use when you need to create or update secret values in a specific project and config.
Why this helps
A newly shared credential file can create exposure before anyone rotates the related secret.
- React to new access quickly
- Reduce stale credential exposure
- Create an audit record
Setup
Build it in a few focused steps.
- 1Connect Google Super and Doppler in Notis once.
- 2Create an automation for sensitive file sharing events.
- 3Tell Notis to identify the affected credential and update its Doppler secret according to your rotation instruction.
- 4Pick File Shared as the trigger.
- 5Choose a report channel and test with one controlled permission change.
Questions about this workflow
Can Notis rotate a value by itself?
It can update the Doppler secret with the new value you provide or with data available from the connected workflow.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Google Super to Doppler. A trigger fires from one place; an action lands in another.
Google Super triggers
Doppler actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Get Authenticated User Info
Tool to retrieve information about the authenticated user or token. Use when you need to verify authentication status or get details about the current token's workplace and permissions.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Get Config Log
Tool to retrieve a specific config log from Doppler. Use when you need to view details about a particular configuration change or event.
Aggregate Metric Changed
Triggers when an aggregate metric (SUM/COUNT/AVG/MIN/MAX) changes in a Google Sheets spreadsheet. This trigger monitors an aggregate calculation on a target column (optionally filtered by a search column/value) and fires when the calculated result changes.
List Config Logs
Tool to retrieve configuration change logs for a specific config in a project. Use when you need to view the history of configuration changes, track who made changes, or identify rollback actions.
Attendee Response Changed
Polling trigger that fires when any attendee's RSVP changes to accepted, declined, or tentative. Returns attendee info and current status.
Get Config
Tool to retrieve a specific Doppler config by project and config name. Use when you need to get configuration details for a specific project environment.
Cell Range Values Changed
Triggers when values in a specified A1 range change in Google Sheets. This trigger monitors a specific cell or range of cells and fires when any values change.
List Doppler Configs
Tool to list configurations from a Doppler project. Use when you need to retrieve all configs or filter by environment. Supports pagination for large result sets.
Comment Added (Docs/Sheets/Slides)
Triggers when a new comment is added to Google Docs, Sheets, or Slides.
Create Encrypted Share Link
Tool to generate a Doppler Share link by sending an encrypted secret. Use when you need to securely share secrets with end-to-end encryption. The receive flow is end-to-end encrypted where the encrypted secret will be decrypted on the recipient's browser.
Conditional Format Rule Changed
Triggers when conditional formatting rules change in a Google Spreadsheet. Detects when rules are added, updated, or removed. Uses snapshot-based diffing to detect changes between polls.
Create Plain Text Share Link
Tool to generate a Doppler Share link by sending a plain text secret. Use when you need to securely share secrets with expiration controls. The secret is not stored in plain text by Doppler; the receive flow is end-to-end encrypted where the encrypted secret is decrypted in the browser.
Data Validation Rule Changed
Triggers when data validation rules change (added/updated/removed) in a Google Spreadsheet. Uses snapshot-based diffing to detect changes between polls.
List Environments
Tool to list all environments in a Doppler project. Use when you need to retrieve the environments available in a specific project.
Connect any two apps with Notis in the middle.
Google Super and Doppler, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Doppler.