Automation library · Alerts and monitoring

Qualys vulnerability trigger scan subWorkflow with Slack

Started by an event in a connected app, and works across Slack. 19 steps, 1 branch, 2 loops or waits: a working afternoon to understand properly.

Medium

19 stepsMedium: a working afternoon
1Branch: places the flow splits
2Loops or waits
1Service it connects to

The flow

Starts it 2Logic 11Service 6

The steps in the order they run, from what starts it.

  1. 1Execute Workflow TriggerExecute Workflow triggerStarts it
  2. 2When clicking "Test workflow"Manual triggerStarts it
  3. 3Demo DataSetLogic
  4. 4Global Variables & Slack ChannelSetLogic
  5. 5MergeMergeLogic
  6. 6Post ReceiptSlackService
  7. 7Start VM Scan in QualysHttp RequestService
  8. 8Save receipt message timestampSetLogic
  9. 9Convert XML to JSONXmlLogic
  10. 10Confirm WaitingSlackService
  11. 11Begin Wait LoopNo OpLogic
  12. 12Merge1MergeLogic
  13. 13Loop Over ItemsSplit In BatchesLogic
  14. 14Wait 5 MinWaitLogic
  15. 15Fetch Scan ResultsHttp RequestService
  16. 16Convert XML to JSON1XmlLogic
  17. 17Check if Scan FinishedIfLogic
  18. 18Delete ReceiptSlackService
  19. 19Post Vulnerability Scan Summary to SlackSlackService

How it's built

Starts on
An event in a connected app
Steps
19, with 1 branch, 2 loops or waits
Size
Medium: a working afternoon
Connects to
Slack
Model
None. This is plumbing, not judgement

Questions

What does it need to run?

An n8n account, plus your own Slack account. You connect your own accounts after importing it; none are included.

What starts it?

It starts on an event in a connected app.

Does it use AI?

No. Every step is fixed logic or a call to a service, so it does the same thing every time.

How long does it take to set up?

Plan an afternoon. 19 steps is enough that you should read each one before running it.

How do I import it?

Copy the workflow, open a new workflow in n8n and paste. The steps appear on the canvas, ready for your own accounts.

Before you run it

Nothing here has been tested by us. It is somebody's working automation, read and described from its own steps. Treat the connections it wants as a list of accounts it will touch, and read the 19 steps before you point it at anything that matters.