Quick overview
Quick overview This workflow runs every Monday at 9am to fetch your repository’s package.json from GitHub, scan it for vulnerabilities using the Apify NPM CVE Monitor actor, and send an emergency alert to a Slack channel only when high or critical issues (or suspicious patterns) are detected. How it works Runs every Monday at 9am on a schedule. Fetches the latest package.json file from your GitHub repository using the GitHub Contents API. Sends the package.json content to the Apify NPM CVE Monitor actor to scan for medium-and-above vulnerabilities and suspicious dependency patterns. Retrieves the scan results from the Apify dataset and groups findings into critical, high, medium, and suspicious buckets. Checks whether any critical or high severity vulnerabilities are present and stops if none are found. Formats a detailed Slack message with per-package CVE details and suggested fixes and posts it to the configured Slack channel. Setup Create a GitHub personal access token with read access to repository contents and replace YOUR_GITHUB_ORG/YOUR_REPO and YOUR_GITHUB_TOKEN in the GitHub request URL and Authorization header. Add your Apify API token and replace YOUR_APIFY_API_TOKEN in both Apify HTTP requests. Configure Slack OAuth2 credentials in n8n and replace YOUR_SLACK_CHANNEL_ID with the target channel ID. Update the repository name placeholder in the Slack message text inside the emergency alert formatting step so alerts reference the correct repo. An n8n automation workflow template by Joseph Fadero.
Joseph Fadero
web
free
Others in the same category, ranked by how often they are opened.
