Detect compromised GitHub dependencies with Gemini and Slack alerts
Ready for 3.0Ready for 3.0. This template uses no nodes that n8n 3.0 removes. No removed nodes, versions or helpers found. Static check, last run 2026-10-19.
What this workflow does
This AI workflow has 22 nodes and runs on a schedule (every hour). Along the way it connects Google Gemini Chat Model, Slack and GitHub.
How it runs
Trigger: On a schedule (every hour).
- Settings (Edit Fields (Set)): sets 8 fields: github_owner, owner_type, lookback_days…
- Create Incident Table (Data table): create (table)
- Load Incidents (Data table): get (row)
- Build Advisory Queries (Code): runs custom JavaScript code
- Fetch Advisories (HTTP Request): calls an HTTP API
- Index Advisories (Code): runs custom JavaScript code
- Any Advisories? (If): checks a condition and branches into true / false
- List Repositories (HTTP Request): calls an HTTP API
- Filter: keeps only the items that match a condition
- Limit: keeps the first few items
…plus 9 more steps. See the full node list below.
Services it uses
Before you upgrade to n8n 3.0
Nothing in this workflow is removed in n8n 3.0, so it should import and run after the upgrade.
Nodes used (13)
- Schedule Trigger
n8n-nodes-base.scheduleTrigger - Edit Fields (Set)
n8n-nodes-base.set - Data table
n8n-nodes-base.dataTable - Code
n8n-nodes-base.code - HTTP Request
n8n-nodes-base.httpRequest - If
n8n-nodes-base.if - Filter
n8n-nodes-base.filter - Limit
n8n-nodes-base.limit - Basic LLM Chain
@n8n/n8n-nodes-langchain.chainLlm - Google Gemini Chat Model
@n8n/n8n-nodes-langchain.lmChatGoogleGemini - Structured Output Parser
@n8n/n8n-nodes-langchain.outputParserStructured - Slack
n8n-nodes-base.slack - GitHub
n8n-nodes-base.github
From the author
Quick overview Know within an hour when a hijacked or malicious npm, PyPI or other open-source package lands in any of your GitHub repositories. This workflow checks new GitHub malware and critical advisories against every repository's dependency graph and…