Automation library · Alerts and monitoring

Triage security vulnerability alerts with NVD and Gemini

Started by another system calling it, and works across Jira, Redis and Supabase. It hands the judgement calls to Gemini. 17 steps, 3 branches: a working afternoon to understand properly.

MediumCalls a model: Gemini

Download free
17 stepsMedium: a working afternoon
3Branches: places the flow splits
0Loops or waits
3Services it connects to

The flow

Starts it 5Model 3Logic 4Service 5

The steps in the order they run, from what starts it.

  1. 1When Vulnerability Alert ReceivedWebhookStarts it
  2. 2Gemini ModelLm Chat Google GeminiModel
  3. 3Parse Structured OutputOutput Parser StructuredModel
  4. 4If Valid PayloadIfLogic
  5. 5Risk Analyst AgentAgentModel
  6. 6Increment Dedup CounterRedisService
  7. 7Send Invalid Payload ResponseRespond To WebhookStarts it
  8. 8Route by Risk LevelSwitchLogic
  9. 9If First OccurrenceIfLogic
  10. 10Create Remediated Ticket in JiraJiraService
  11. 11Create Backlog Ticket in JiraJiraService
  12. 12Fetch NVD Vulnerability DetailsHttp RequestService
  13. 13Send Duplicate ResponseRespond To WebhookStarts it
  14. 14Send Success ResponseRespond To WebhookStarts it
  15. 15Send Backlog ResponseRespond To WebhookStarts it
  16. 16Fetch Server Info from SupabaseSupabaseService
  17. 17Prepare LLM ContextSetLogic

How it's built

Starts on
Another system calling it
Steps
17, with 3 branches
Size
Medium: a working afternoon
Connects to
Jira, Redis, Supabase
Model
Gemini

Questions

What does it need to run?

An n8n account, plus your own Jira, Redis and Supabase accounts, and a key for Gemini. You connect your own accounts after importing it; none are included.

What starts it?

It starts on another system calling it.

Does it use AI?

Yes. It calls Gemini. Model calls are billed by the provider, not by n8n.

How long does it take to set up?

Plan an afternoon. 17 steps is enough that you should read each one before running it.

How do I import it?

Copy the workflow, open a new workflow in n8n and paste. The steps appear on the canvas, ready for your own accounts.

Before you run it

Nothing here has been tested by us. It is somebody's working automation, read and described from its own steps. Treat the connections it wants as a list of accounts it will touch, and read the 17 steps before you point it at anything that matters.