Automation library · Research and reporting

Scan code repositories for governance issues with OpenAI

Started by an event in a connected app. It calls services over plain HTTP rather than through connectors. It hands the judgement calls to OpenAI. 23 steps, 2 branches: large, and worth reading before you trust it with anything live.

LargeCalls a model: OpenAI

Download free
23 stepsLarge: read it before trusting it with anything live
2Branches: places the flow splits
0Loops or waits
0Services by connector: it calls them over plain HTTP

The flow

Starts it 1Model 11Logic 10Service 1

The steps in the order they run, from what starts it.

  1. 1Start Governance ScanManual triggerStarts it
  2. 2Orchestrator ModelLm Chat Open AiModel
  3. 3Static Analysis ModelLm Chat Open AiModel
  4. 4Architectural Analysis ModelLm Chat Open AiModel
  5. 5Report Generation ModelLm Chat Open AiModel
  6. 6Structured Governance OutputOutput Parser StructuredModel
  7. 7Security Analysis ModelLm Chat Open AiModel
  8. 8Extract Repository MetadataSshService
  9. 9Governance Orchestrator AgentAgentModel
  10. 10Static Code Analysis AgentAgent ToolModel
  11. 11Architectural Compliance AgentAgent ToolModel
  12. 12CTO Report Generation AgentAgent ToolModel
  13. 13Security Vulnerability Scanner AgentAgent ToolModel
  14. 14Format Final ReportSetLogic
  15. 15Check Critical Issues ThresholdIfLogic
  16. 16Prepare Escalation AlertSetLogic
  17. 17Log Standard ReportSetLogic
  18. 18Route by Severity LevelSwitchLogic
  19. 19Merge Analysis PathsMergeLogic
  20. 20Critical Severity HandlerSetLogic
  21. 21Medium Severity HandlerSetLogic
  22. 22Enrich Final OutputSetLogic
  23. 23Aggregate Critical FindingsAggregateLogic

How it's built

Starts on
An event in a connected app
Steps
23, with 2 branches
Size
Large: read it before trusting it with anything live
Connects to
Nothing by connector; it calls services over plain HTTP
Model
OpenAI

Questions

What does it need to run?

An n8n account, and a key for OpenAI. You connect your own accounts after importing it; none are included.

What starts it?

It starts on an event in a connected app.

Does it use AI?

Yes. It calls OpenAI. Model calls are billed by the provider, not by n8n.

How long does it take to set up?

Take your time. At 23 steps it is large: read it before trusting it with anything live.

How do I import it?

Copy the workflow, open a new workflow in n8n and paste. The steps appear on the canvas, ready for your own accounts.

Before you run it

Nothing here has been tested by us. It is somebody's working automation, read and described from its own steps. Treat the connections it wants as a list of accounts it will touch, and read the 23 steps before you point it at anything that matters.